SQL Injection_CVE-2026-5785

8.1 / 10

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module.

Basic Information

ID CVE-2026-5785

Source Zohocorp

Published Apr 16, 2026 at 13:46

Modified Apr 16, 2026 at 14:25

Affected Product

Vendor Zohocorp

Product ManageEngine PAM360

Affected Versions Zohocorp ManageEngine PAM360 0
Zohocorp ManageEngine Password Manager Pro 8600

CWE Classification

CWE-89

References

www.manageengine.com /products/passwordmanagerpro/advisory/cve-2026-5785.html

{
    "lastseen": "",
    "description": "Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module.",
    "published": "2026-04-16T13:46:28.313Z",
    "modified": "2026-04-16T14:25:31.160Z",
    "type": "cve",
    "title": "SQL Injection",
    "source": "Zohocorp",
    "references": "https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-5785.html",
    "id": "CVE-2026-5785",
    "bulletinFamily": "",
    "cwe": [
        "CWE-89"
    ],
    "cvelist": null,
    "sourceData": "Zohocorp ManageEngine PAM360 0\nZohocorp ManageEngine Password Manager Pro 8600",
    "sourceHref": "",
    "cvss": {
        "score": 8.1,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "ManageEngine PAM360",
    "version": "0",
    "vendor": "Zohocorp",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}