CVE-2014-8498

no score yetEPSS 13%

SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allows remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter.

EPSS: 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2014-11-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zohocorp:manageengine_password_manager_pro

References

http://osvdb.org/show/osvdb/114483
http://packetstormsecurity.com/files/129036/Password-Manager-Pro-SQL-Injection.html
http://seclists.org/fulldisclosure/2014/Nov/18
http://www.exploit-db.com/exploits/35210
http://www.securityfocus.com/bid/71016

Check your stack JSON