CVEvulnerability

CVE-2024-5546

8.8 HIGH Published 2024-08-28 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-08-28
Last modified
2026-06-17
Assigner
0fc0942c-577d-436f-ae8e-945763c79b02
CVSS 3.1 (0fc0942c-577d-436f-ae8e-945763c79b02)
8.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89

Description

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option.

Affected configurations

• zohocorp manageengine pam360 4.0 • zohocorp manageengine pam360 4.1 • zohocorp manageengine pam360 4.5 • zohocorp manageengine pam360 5.0 • zohocorp manageengine pam360 5.1 • zohocorp manageengine pam360 5.2 • zohocorp manageengine pam360 5.3 • zohocorp manageengine pam360 5.4 • zohocorp manageengine pam360 5.5 • zohocorp manageengine pam360 5.7 • zohocorp manageengine pam360 5.8 • zohocorp manageengine pam360 5.9 • zohocorp manageengine pam360 6.0 • zohocorp manageengine pam360 6.1 • zohocorp manageengine pam360 6.2 • zohocorp manageengine pam360 6.3 • zohocorp manageengine pam360 6.4 • zohocorp manageengine pam360 6.5 • zohocorp manageengine pam360 6.6 • zohocorp manageengine pam360 6.7 • zohocorp manageengine pam360 7.0 • zohocorp manageengine password manager pro 6.0 • zohocorp manageengine password manager pro 6.1 • zohocorp manageengine password manager pro 6.2 • zohocorp manageengine password manager pro 6.4 • zohocorp manageengine password manager pro 6.5 • zohocorp manageengine password manager pro 6.6 • zohocorp manageengine password manager pro 6.7 • zohocorp manageengine password manager pro 6.8 • zohocorp manageengine password manager pro 6.9 • zohocorp manageengine password manager pro 7.0 • zohocorp manageengine password manager pro 7.1 • zohocorp manageengine password manager pro 7.5 • zohocorp manageengine password manager pro 7.6 • zohocorp manageengine password manager pro 8.0 • zohocorp manageengine password manager pro 8.1 • zohocorp manageengine password manager pro 8.2 • zohocorp manageengine password manager pro 8.3 • zohocorp manageengine password manager pro 8.4 • zohocorp manageengine password manager pro 8.5 • zohocorp manageengine password manager pro 8.6 • zohocorp manageengine password manager pro 8.7 • zohocorp manageengine password manager pro 9.0 • zohocorp manageengine password manager pro 9.1 • zohocorp manageengine password manager pro 9.2 • zohocorp manageengine password manager pro 9.3 • zohocorp manageengine password manager pro 9.4 • zohocorp manageengine password manager pro 9.5 • zohocorp manageengine password manager pro 9.6 • zohocorp manageengine password manager pro 9.7 • zohocorp manageengine password manager pro 9.8 • zohocorp manageengine password manager pro 9.9 • zohocorp manageengine password manager pro 10.0 • zohocorp manageengine password manager pro 10.1 • zohocorp manageengine password manager pro 10.2 • zohocorp manageengine password manager pro 10.3 • zohocorp manageengine password manager pro 10.4 • zohocorp manageengine password manager pro 10.5 • zohocorp manageengine password manager pro 11.0 • zohocorp manageengine password manager pro 11.1 … and 7 more

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References