CVE-2016-1159

MEDIUM 6.5CVE-2016-1159 · Published 09/03/2020 · updated 17/06/2026

In short

CVE-2016-1159 is a MEDIUM (CVSS 6.5) vulnerability affecting manageengine password manager pro (zohocorp).
Chance of exploitation in the next 30 days (EPSS): 4.4%, higher than 91.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
manageengine password manager pro zohocorp	`= 8.3= 8.4`	No fix yet

Description

In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402), underprivileged users can obtain sensitive information (entry password history) via a vulnerable hidden service.

References

jvn.jp/vu/JVNVU90405898/index.html · Third Party Advisory
excellium-services.com/cert-xlm-advisory/cve-2016-1159 · Third Party Advisory
manageengine.com/products/passwordmanagerpro/issues-fixed.html · Vendor Advisory
manageengine.com/products/passwordmanagerpro/release-notes.html · Release Notes

More vulnerabilities in manageengine password manager pro

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

manageengine password manager pro

zohocorp

= 8.3= 8.4

No fix yet

More vulnerabilities in manageengine password manager pro

See all →