CVE-2024-5546

8.8 highEPSS 3.0%

High (8.8) in zohocorp. EPSS 3.0% chance of exploitation in the next 30 days.

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-08-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zohocorp:manageengine_pam360
zohocorp:manageengine_password_manager_pro

References

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2024-5546.html

Check your stack JSON