---
title: "ManageEngine Password Manager Pro vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/manageengine/password-manager-pro
type: product
description: "ManageEngine Password Manager Pro has 5 published CVEs, 0 in CISA KEV and 3 with public exploits."
updated: 2024-08-28
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# ManageEngine Password Manager Pro vulnerabilities

Vendor: [ManageEngine](https://radicalnotion.ai/vendor/manageengine)

- **Published CVEs:** 5
- **In CISA KEV:** 0
- **With a public exploit:** 3
- **With a patch:** 1
- **Average CVSS:** 6.7
- **First CVE:** 2009-12-22
- **Latest CVE:** 2024-08-28

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 0 |
| High | 2 |
| Medium | 3 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-89](https://radicalnotion.ai/cwe/cwe-89) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 3 |
| [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 1 |
| [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2014 | 3 |
| 2015 | 0 |
| 2016 | 0 |
| 2017 | 0 |
| 2018 | 0 |
| 2019 | 0 |
| 2020 | 0 |
| 2021 | 0 |
| 2022 | 0 |
| 2023 | 0 |
| 2024 | 1 |

## Affected versions (top 13 of 14)

| Version | Kind | CVEs |
| --- | --- | --- |
| \<= 7.1 | range | 2 |
| \< 12431 | range | 1 |
| \<= 6.1 | range | 1 |
| \<= 7.0 | range | 1 |
| 4.6 | range | 1 |
| 4.7 | range | 1 |
| 4.8 | range | 1 |
| 5.0 | range | 1 |
| 5.1 | range | 1 |
| 5.2 | range | 1 |
| 5.3 | range | 1 |
| 5.4 | range | 1 |
| 12431 | patched | 1 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2024-5546 | SQL Injection | high | 8.8 | No | No | Yes |
| CVE-2014-9372 | - | medium | 6.4 | No | No | No |
| CVE-2014-3996 | - | high | 7.5 | No | Yes | No |
| CVE-2014-8499 | - | medium | 6.5 | No | Yes | No |
| CVE-2009-4387 | - | medium | 4.3 | No | Yes | No |

## Frequently asked questions

### How many CVEs does ManageEngine Password Manager Pro have?

ManageEngine Password Manager Pro has 5 published CVE records since 2009.

### How many ManageEngine Password Manager Pro CVEs are in CISA KEV?

None of ManageEngine Password Manager Pro's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for ManageEngine Password Manager Pro vulnerabilities?

Yes — 3 of ManageEngine Password Manager Pro's CVEs have a known public exploit.

### Which versions of ManageEngine Password Manager Pro are affected?

14 distinct ManageEngine Password Manager Pro versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in ManageEngine Password Manager Pro CVEs?

ManageEngine Password Manager Pro's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

### What is the average severity of ManageEngine Password Manager Pro CVEs?

The average CVSS base score across ManageEngine Password Manager Pro's scored CVEs is 6.7.

## Other products from this vendor

- [ADAudit Plus](https://radicalnotion.ai/vendor/manageengine/adaudit-plus) (38 CVEs)
- [Applications Manager](https://radicalnotion.ai/vendor/manageengine/applications-manager) (14 CVEs)
- [ServiceDesk Plus](https://radicalnotion.ai/vendor/manageengine/servicedesk-plus) (14 CVEs)
- [Exchange Reporter Plus](https://radicalnotion.ai/vendor/manageengine/exchange-reporter-plus) (8 CVEs)
- [OpManager](https://radicalnotion.ai/vendor/manageengine/opmanager) (7 CVEs)
- [Desktop Central](https://radicalnotion.ai/vendor/manageengine/desktop-central) (6 CVEs)
- [ADSelfService Plus](https://radicalnotion.ai/vendor/manageengine/adselfservice-plus) (5 CVEs)
- [SupportCenter Plus](https://radicalnotion.ai/vendor/manageengine/supportcenter-plus) (5 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/manageengine/password-manager-pro). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.