Cybersecurity Alerts

Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-502

References

• https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html
• https://nvd.nist.gov/vuln/detail/CVE-2022-35405