CVE-2024-27312

HIGH 8.1CVE-2024-27312 · Published 20/05/2024 · updated 17/06/2026

In short

CVE-2024-27312 is a HIGH (CVSS 8.1) vulnerability affecting manageengine pam360 (zohocorp).
Chance of exploitation in the next 30 days (EPSS): 0.90%, higher than 59.6% of all vulnerabilities.
Fix: update to 6.6 or later.

Package	Affected versions	Patched versions
manageengine pam360 zohocorp	`= 6.6< 6.6`	`6.6`

Description

Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability.

References

manageengine.com/privileged-access-management/advisory/cve-2024-27312.html · Vendor Advisory

More vulnerabilities in manageengine pam360

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

manageengine pam360

zohocorp

= 6.6< 6.6

6.6

More vulnerabilities in manageengine pam360

See all →