CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-9346

Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery (CSRF) attacks, as demonstrated by changing a user's role.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 64.1%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.8

References

Products affected by CVE-2020-9346

Zohocorp » Manageengine Password Manager Pro » Version: 10.0

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:10.0
Zohocorp » Manageengine Password Manager Pro » Version: 10.1

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:10.1
Zohocorp » Manageengine Password Manager Pro » Version: 10.2

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:10.2
Zohocorp » Manageengine Password Manager Pro » Version: 10.3

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:10.3
Zohocorp » Manageengine Password Manager Pro » Version: 10.4

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:10.4
Zohocorp » Manageengine Password Manager Pro » Version: 4.6

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:4.6
Zohocorp » Manageengine Password Manager Pro » Version: 4.7

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:4.7
Zohocorp » Manageengine Password Manager Pro » Version: 4.8

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:4.8
Zohocorp » Manageengine Password Manager Pro » Version: 5.0

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.0
Zohocorp » Manageengine Password Manager Pro » Version: 5.1

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.1
Zohocorp » Manageengine Password Manager Pro » Version: 5.2

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.2
Zohocorp » Manageengine Password Manager Pro » Version: 5.3

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.3
Zohocorp » Manageengine Password Manager Pro » Version: 5.4

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.4
Zohocorp » Manageengine Password Manager Pro » Version: 6.0

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.0
Zohocorp » Manageengine Password Manager Pro » Version: 6.1

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.1
Zohocorp » Manageengine Password Manager Pro » Version: 6.2

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.2
Zohocorp » Manageengine Password Manager Pro » Version: 6.3

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.3
Zohocorp » Manageengine Password Manager Pro » Version: 6.4

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4
Zohocorp » Manageengine Password Manager Pro » Version: 6.5

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5
Zohocorp » Manageengine Password Manager Pro » Version: 6.6

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.6
Zohocorp » Manageengine Password Manager Pro » Version: 6.7

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.7
Zohocorp » Manageengine Password Manager Pro » Version: 6.8

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8
Zohocorp » Manageengine Password Manager Pro » Version: 6.9

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9
Zohocorp » Manageengine Password Manager Pro » Version: 7.0

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0
Zohocorp » Manageengine Password Manager Pro » Version: 7.1

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.1
Zohocorp » Manageengine Password Manager Pro » Version: 7.5

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.5
Zohocorp » Manageengine Password Manager Pro » Version: 7.6

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.6
Zohocorp » Manageengine Password Manager Pro » Version: 8.0

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:8.0
Zohocorp » Manageengine Password Manager Pro » Version: 8.1

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:8.1
Zohocorp » Manageengine Password Manager Pro » Version: 8.2

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:8.2
Zohocorp » Manageengine Password Manager Pro » Version: 8.3

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:8.3
Zohocorp » Manageengine Password Manager Pro » Version: 8.4

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:8.4
Zohocorp » Manageengine Password Manager Pro » Version: 8.5

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:8.5
Zohocorp » Manageengine Password Manager Pro » Version: 8.6

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:8.6
Zohocorp » Manageengine Password Manager Pro » Version: 8.7

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:8.7
Zohocorp » Manageengine Password Manager Pro » Version: 9.0

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:9.0
Zohocorp » Manageengine Password Manager Pro » Version: 9.1

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:9.1
Zohocorp » Manageengine Password Manager Pro » Version: 9.2

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:9.2
Zohocorp » Manageengine Password Manager Pro » Version: 9.3

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:9.3
Zohocorp » Manageengine Password Manager Pro » Version: 9.4

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:9.4
Zohocorp » Manageengine Password Manager Pro » Version: 9.5

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:9.5
Zohocorp » Manageengine Password Manager Pro » Version: 9.6

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:9.6
Zohocorp » Manageengine Password Manager Pro » Version: 9.7

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:9.7
Zohocorp » Manageengine Password Manager Pro » Version: 9.8

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:9.8
Zohocorp » Manageengine Password Manager Pro » Version: 9.9

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:9.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-9346

Products

Pricing

Contact Us