manageengine access manager plus vulnerabilities and fixes
Recent CVEs affecting manageengine access manager plus, with upgrade or downgrade steps. 1 tracked.
Also searched as: manageengineaccessmanagerplus.
manageengine access manager plus has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-01-13. Highest priority: CVE-2025-11669 (score 42/100).
- CVE-2025-11669 HIGH 8.1 UPGRADE UPGRADE Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager
FAQ
How do I fix manageengine access manager plus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is manageengine access manager plus being exploited right now?
None of the tracked manageengine access manager plus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which manageengine access manager plus CVE should I patch first?
CVE-2025-11669 currently ranks highest (42/100): Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager .