Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)
| Software | From | Fixed in |
|---|---|---|
| zohocorp / manageengine_access_manager_plus | 4.3-build4300 | 4.3-build4300.x |
| zohocorp / manageengine_access_manager_plus | 4.3-build4301 | 4.3-build4301.x |
| zohocorp / manageengine_access_manager_plus | - | 4.3 |
| zohocorp / manageengine_access_manager_plus | 4.3-build4302 | 4.3-build4302.x |
| zohocorp / manageengine_password_manager_pro | - | 12.1 |
| zohocorp / manageengine_password_manager_pro | 12.1-build12100 | 12.1-build12100.x |
| zohocorp / manageengine_pam360 | - | 5.5 |
| zohocorp / manageengine_pam360 | 5.5-build5500 | 5.5-build5500.x |