[CVE-2026-14828] Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and A…

Descripción técnica

Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL Injection vulnerability.

Puntuación CVSS

Score: 8.8/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-89

Fuente oficial

Publicado en NIST NVD.