zohocorp manageengine password manager pro

Name: zohocorp manageengine password manager pro
Brand: zohocorp

productUS

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

8critical5high8medium0low

updated 2026-10-27

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-35405US	critical9.8OT critical	99.9% (100th)	KEV	12.1	2022-07-19	2 versions
CVE-2022-47966US	critical9.8OT critical	99.8% (100th)	KEV	12.1	2023-01-18	2 versions
CVE-2014-3997US	high7.5	13.1% (96th)	Exploit	no fix	2014-12-05	16 versions
CVE-2014-8498US	medium6.5	12.7% (96th)	Exploit	no fix	2014-11-17	≤ 7.1
CVE-2022-40300US	critical9.8	99.1% (100th)	—	no fix	2022-09-16	50 versions
CVE-2022-29081US	critical9.8	83.5% (100th)	—	no fix	2022-04-28	8 versions
CVE-2022-43671US	critical9.8	74.8% (100th)	—	12.1	2022-11-12	2 versions
CVE-2022-47523US	critical9.8	70.6% (99th)	—	12.2	2023-01-05	2 versions
CVE-2022-43672US	critical9.8	67.1% (99th)	—	12.1	2022-11-12	2 versions
CVE-2020-9347US	critical9.8	7.79% (95th)	—	no fix	2020-03-16	5 versions
CVE-2016-1159US	medium6.5	4.42% (91st)	—	no fix	2020-03-09	2 versions
CVE-2015-5459US	medium6.5	3.47% (89th)	—	no fix	2015-07-08	≤ 8.1
CVE-2020-27449US	medium6.1	3.15% (88th)	—	no fix	2023-08-11	= 11.1
CVE-2021-31857US	medium5.9	3.08% (88th)	—	11.1	2021-06-16	2 versions
CVE-2024-5546US	high8.8	3.04% (87th)	—	no fix	2024-08-28	46 versions
CVE-2020-9346US	high8.8	2.20% (82nd)	—	10.4	2020-03-16	2 versions
CVE-2021-33617US	medium5.3	2.05% (81st)	—	11.2	2021-07-31	2 versions
CVE-2019-12133US	high7.8	1.72% (77th)	—	no fix	2019-06-18	= 9.9
CVE-2017-17698US	medium6.1	1.55% (75th)	—	9.4	2017-12-15	9.0 → 9.4
CVE-2023-2291US	high7.8OT elevated	0.81% (57th)	—	no fix	2023-04-26	—
CVE-2025-11669US	—OT elevated	0.79% (56th)	—	13.2	2026-01-13	2 versions
CVE-2023-6105US	medium5.5	0.69% (53rd)	—	12.3	2023-11-15	< 12.3

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')8 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-1236Improper Neutralization of Formula Elements in a CSV File1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-204Observable Response Discrepancy1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE22 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan