CyberSec.Space Logo
Back to CVE Browser

CVE-2022-35405

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2022-07-19
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)

Affected Platforms (CPE)

📦
Zohocorp

Manageengine Access Manager Plus

< 4.3= 4.3
📦
Zohocorp

Manageengine Pam360

< 5.5= 5.5
📦
Zohocorp

Manageengine Password Manager Pro

< 12.1= 12.1

References & Advisories

🔗 http://packetstormsecurity.com/files/167918/Zoho-Password-Manager-Pro-XML-RPC-Java-Deserialization.html
🔗 https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html
🔗 http://packetstormsecurity.com/files/167918/Zoho-Password-Manager-Pro-XML-RPC-Java-Deserialization.html
🔗 https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-35405

Related Vulnerabilities

CVE-2026-148566.3

A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, ca...

CVE-2026-400001.8

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files...

CVE-2026-175277.7

In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI...

CVE-2026-658948.7

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could ex...