Description
Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality.
Published: 2026-01-13
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 27 Feb 2026 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 02 Feb 2026 15:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.4:build4400:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_pam360:8.2:build8200:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_pam360:8.2:build8201:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:-:*:*:*
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:13.2:build13200:*:*:-:*:*:*
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:13.2:build13210:*:*:-:*:*:*
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:13.2:build13220:*:*:-:*:*:*

Tue, 13 Jan 2026 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 13 Jan 2026 14:15:00 +0000

Type Values Removed Values Added
Description Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality.
Title Broken Access Control
First Time appeared Zohocorp
Zohocorp manageengine Access Manager Plus
Zohocorp manageengine Pam360
Zohocorp manageengine Password Manager Pro
Weaknesses CWE-862
CPEs cpe:2.3:a:zohocorp:manageengine_access_manager_plus:*:*:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_pam360:*:*:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:*:*:*:*
Vendors & Products Zohocorp
Zohocorp manageengine Access Manager Plus
Zohocorp manageengine Pam360
Zohocorp manageengine Password Manager Pro
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Zohocorp Manageengine Access Manager Plus Manageengine Pam360 Manageengine Password Manager Pro
cve-icon MITRE

Status: PUBLISHED

Assigner: Zohocorp

Published:

Updated: 2026-02-26T15:04:46.432Z

Reserved: 2025-10-13T04:36:27.412Z

Link: CVE-2025-11669

cve-icon Vulnrichment

Updated: 2026-01-13T14:48:02.877Z

cve-icon NVD

Status : Analyzed

Published: 2026-01-13T14:16:37.160

Modified: 2026-02-02T15:42:06.170

Link: CVE-2025-11669

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses