CVE-2026-5785CWE-89

SQL Injection

High · published April 16, 2026

CVSS v3.1
8.1
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.02622 · 85.3th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-04-16T13:46Z
EPSS history
Timeline
  • 16 APR 13:46Z
    SQL Injection
    cvelistv5