PatchTheCVEmanageengine pam360 vulnerabilities and fixes
Recent CVEs affecting manageengine pam360, with upgrade or downgrade steps. 4 tracked.
Also searched as: manageenginepam360.
manageengine pam360 has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-13. Highest priority: CVE-2024-5546 (score 51/100).
- CVE-2025-11669 HIGH 8.1 UPGRADE UPGRADE Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager
- CVE-2024-5546 HIGH 8.3 DOWNGRADE DOWNGRADE Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001
- CVE-2024-27313 MEDIUM 6.3 DOWNGRADE Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability
- CVE-2024-27312 HIGH 8.1 UPGRADE Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-priv
FAQ
How do I fix manageengine pam360 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is manageengine pam360 being exploited right now?
None of the tracked manageengine pam360 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which manageengine pam360 CVE should I patch first?
CVE-2024-5546 currently ranks highest (51/100): Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 .