CVE-2024-5546CWE-89

SQL Injection

High · published August 28, 2024

CVSS v3.1
8.3
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.03040 · 87.4th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2024-08-28T08:44Z
EPSS history
Timeline
  • 28 AUG 08:44Z
    SQL Injection
    cvelistv5