CVE-2022-35405

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2022-07-19

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)

Affected Platforms (CPE)

📦

Zohocorp

Manageengine Access Manager Plus

< 4.3= 4.3

📦

Zohocorp

Manageengine Pam360

< 5.5= 5.5

📦

Zohocorp

Manageengine Password Manager Pro

< 12.1= 12.1

References & Advisories

🔗 http://packetstormsecurity.com/files/167918/Zoho-Password-Manager-Pro-XML-RPC-Java-Deserialization.html

🔗 https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html

🔗 http://packetstormsecurity.com/files/167918/Zoho-Password-Manager-Pro-XML-RPC-Java-Deserialization.html

🔗 https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-35405

Vulnerability Description

Affected Platforms (CPE)

Manageengine Access Manager Plus

Manageengine Pam360

Manageengine Password Manager Pro

References & Advisories

関連する脆弱性情報