CVE-2020-9346

ALTO 8.8CVE-2020-9346 · Published 16/03/2020 · updated 17/06/2026

En resumen

CVE-2020-9346 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a manageengine password manager pro (zohocorp).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.2%, mayor que el 82.5% de las vulnerabilidades.
Solución: actualizar a 10.4 o posterior.

Package	Affected versions	Patched versions
manageengine password manager pro zohocorp	`= 10.4< 10.4`	`10.4`

Description

Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery (CSRF) attacks, as demonstrated by changing a user's role.

References

infigo.hr/upload/web_struktura/Zoho_ManageEngine_Password_Manager_Pro_10.4_CSRF.txt · Third Party Advisory
manageengine.com/products/passwordmanagerpro/issues-fixed.html · Issue Tracking

Más vulnerabilidades de manageengine password manager pro

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

manageengine password manager pro

zohocorp

= 10.4< 10.4

10.4

Más vulnerabilidades de manageengine password manager pro

Ver todo →