Skip to content
OpenAdvisories
High · 8.1 CVE-2025-11669 EUVD-2026-2357GHSA-6ffq-xrg2-pp92

Broken Access Control

Published Jan 13, 2026 · Updated Feb 26, 2026 · Assigned by Zohocorp

Description

Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality.

Affected products

VendorProductAffectedFixed
Zohocorp ManageEngine PAM360 < 8202 8202
Zohocorp ManageEngine Password Manager Pro < 13221 13221
Zohocorp ManageEngine Access Manager Plus < 4401 4401

References