csirt@kutim:~/threat-intel/cve/CVE-2024-5546

Katalog CVE

CVSS 8.8 · High EPSS 3,0%

Kerentanan Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') pada zohocorp manageengine pam360. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option.

Rincian

Terbit di NVD
28 Agustus 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
EPSS (30 hari)
3,0% peluang dieksploitasi; lebih tinggi dari 87,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
zohocorp manageengine pam360 Versi 4.0
zohocorp manageengine pam360 Versi 4.0 build4001
zohocorp manageengine pam360 Versi 4.0 build4002
zohocorp manageengine pam360 Versi 4.1
zohocorp manageengine pam360 Versi 4.1 build4100
zohocorp manageengine pam360 Versi 4.1 build4101
zohocorp manageengine pam360 Versi 4.5
zohocorp manageengine pam360 Versi 4.5 build4500
zohocorp manageengine pam360 Versi 4.5 build4501
zohocorp manageengine pam360 Versi 5.0
zohocorp manageengine pam360 Versi 5.0 build5000
zohocorp manageengine pam360 Versi 5.0 build5001
zohocorp manageengine pam360 Versi 5.0 build5002
zohocorp manageengine pam360 Versi 5.0 build5003
zohocorp manageengine pam360 Versi 5.0 build5004
zohocorp manageengine pam360 Versi 5.1
zohocorp manageengine pam360 Versi 5.1 build5100
zohocorp manageengine pam360 Versi 5.2
zohocorp manageengine pam360 Versi 5.2 build5200
zohocorp manageengine pam360 Versi 5.3
zohocorp manageengine pam360 Versi 5.3 build5300
zohocorp manageengine pam360 Versi 5.3 build5301
zohocorp manageengine pam360 Versi 5.3 build5302
zohocorp manageengine pam360 Versi 5.3 build5303
zohocorp manageengine pam360 Versi 5.3 build5304
zohocorp manageengine pam360 Versi 5.3 build5305
zohocorp manageengine pam360 Versi 5.3 build5306
zohocorp manageengine pam360 Versi 5.4 build5400
zohocorp manageengine pam360 Versi 5.4 build5401
zohocorp manageengine pam360 Versi 5.5 build5500
zohocorp manageengine pam360 Versi 5.5 build5510
zohocorp manageengine pam360 Versi 5.5 build5520
zohocorp manageengine pam360 Versi 5.5 build5550
zohocorp manageengine pam360 Versi 5.7 build5700
zohocorp manageengine pam360 Versi 5.7 build5710
zohocorp manageengine pam360 Versi 5.7 build5711
zohocorp manageengine pam360 Versi 5.7 build5712
zohocorp manageengine pam360 Versi 5.7 build5713
zohocorp manageengine pam360 Versi 5.8 build5800
zohocorp manageengine pam360 Versi 5.8 build5801
zohocorp manageengine pam360 Versi 5.8 build5810
zohocorp manageengine pam360 Versi 5.9 build5900
zohocorp manageengine pam360 Versi 5.9 build5950
zohocorp manageengine pam360 Versi 5.9 build5951
zohocorp manageengine pam360 Versi 6.0 build6000
zohocorp manageengine pam360 Versi 6.0 build6010
zohocorp manageengine pam360 Versi 6.0 build6011
zohocorp manageengine pam360 Versi 6.1 build6100
zohocorp manageengine pam360 Versi 6.2 build6200
zohocorp manageengine pam360 Versi 6.2 build6210
zohocorp manageengine pam360 Versi 6.3 build6300
zohocorp manageengine pam360 Versi 6.3 build6310
zohocorp manageengine pam360 Versi 6.3 build6320
zohocorp manageengine pam360 Versi 6.4 build6400
zohocorp manageengine pam360 Versi 6.5 build6500
zohocorp manageengine pam360 Versi 6.5 build6501
zohocorp manageengine pam360 Versi 6.5 build6510
zohocorp manageengine pam360 Versi 6.5 build6520
zohocorp manageengine pam360 Versi 6.5 build6530
zohocorp manageengine pam360 Versi 6.5 build6540

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 226 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.