Zohocorp ManageEngine Password Manager Pro vulnerabilities

26 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Exploited Zohocorp ManageEngine Password Manager Pro vulnerabilities

CVE-2022-47966 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
CVE-2022-35405 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

CVE-2026-14828 — (CVSS 8.8)
CVE-2026-12263 — Authentication Bypass (CVSS 8.8)
CVE-2026-11840 — SQL Injection (CVSS 8.8)
CVE-2026-5785 — SQL Injection (CVSS 8.1)
CVE-2025-11669 — Broken Access Control (CVSS 8.1)
CVE-2024-5546 — SQL Injection (CVSS 8.8)
CVE-2023-6105 — ManageEngine Information Disclosure in Multiple Products (CVSS 5.5)
CVE-2020-27449 — (CVSS 6.1)
CVE-2023-2291 — (CVSS 7.8)
CVE-2022-47966 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability (CVSS 9.8) — exploited
CVE-2022-47523 — (CVSS 9.8)
CVE-2022-43672 — (CVSS 9.8)
CVE-2022-43671 — (CVSS 9.8)
CVE-2022-40300 — (CVSS 9.8)
CVE-2022-35405 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability (CVSS 9.8) — exploited
CVE-2022-29081 — (CVSS 9.8)
CVE-2021-33617 — (CVSS 5.3)
CVE-2021-31857 — (CVSS 5.9)
CVE-2020-9347 — (CVSS 9.8)
CVE-2020-9346 — (CVSS 8.8)
CVE-2016-1159 — (CVSS 6.5)
CVE-2019-12133 — (CVSS 7.8)
CVE-2017-17698 — (CVSS 6.1)
CVE-2015-5459 — (CVSS 6.5)
CVE-2014-3997 — (CVSS 7.5)