Read the docs
TI-2014-03260 Aliases CVE-2014-3997GHSA-72w4-9phv-wp38

SQL injection vulnerability in the MetadataServlet servlet in ManageEngine Password…

Priority MEDIUM 47CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
SQL injection
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-89.

Summary

SQL injection vulnerability in the MetadataServlet servlet in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition 5 through 7 build 7003, IT360 and IT360 Managed Service Providers (MSP) edition before 10.3.3 build 10330, and possibly other ManageEngine products, allows remote attackers or remote authenticated users to execute arbitrary SQL commands via the sv parameter to MetadataServlet.dat.

Why it matters now

EPSS 0.13052 96th percentileScored 2026-11-07
Public exploit Yes 4 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 79

CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.0:*:*:*:-:*:*:*5.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.1:*:*:*:-:*:*:*5.1VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.2:*:*:*:-:*:*:*5.2VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.3:*:*:*:-:*:*:*5.3VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.4:*:*:*:-:*:*:*5.4VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.0:*:*:*:-:*:*:*6.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.0:build6002:*:*:-:*:*:*6.0 build6002VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.1:build6104:*:*:-:*:*:*6.1 build6104VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.2:*:*:*:-:*:*:*6.2VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.2:build6201:*:*:-:*:*:*6.2 build6201VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.0:*:*:*:-:*:*:* Versions 5.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.1:*:*:*:-:*:*:* Versions 5.1 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.2:*:*:*:-:*:*:* Versions 5.2 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.3:*:*:*:-:*:*:* Versions 5.3 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.4:*:*:*:-:*:*:* Versions 5.4 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.0:*:*:*:-:*:*:* Versions 6.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.0:build6002:*:*:-:*:*:* Versions 6.0 build6002 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.1:build6104:*:*:-:*:*:* Versions 6.1 build6104 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.2:*:*:*:-:*:*:* Versions 6.2 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.2:build6201:*:*:-:*:*:* Versions 6.2 build6201 Vulnerable ·Zohocorp
Show 69 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.3:*:*:*:-:*:*:*6.3VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:*:*:*:-:*:*:*6.4VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6401:*:*:-:*:*:*6.4 build6401VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6402:*:*:-:*:*:*6.4 build6402VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6403:*:*:-:*:*:*6.4 build6403VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6404:*:*:-:*:*:*6.4 build6404VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:*:*:*:-:*:*:*6.5VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:build6503:*:*:-:*:*:*6.5 build6503VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:build6504:*:*:-:*:*:*6.5 build6504VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:build6505:*:*:-:*:*:*6.5 build6505VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.6:build6600:*:*:-:*:*:*6.6 build6600VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.7:build6700:*:*:-:*:*:*6.7 build6700VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.7:build6701:*:*:-:*:*:*6.7 build6701VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6800:*:*:-:*:*:*6.8 build6800VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6801:*:*:-:*:*:*6.8 build6801VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6802:*:*:-:*:*:*6.8 build6802VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6803:*:*:-:*:*:*6.8 build6803VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:*:*:*:-:*:*:*6.9VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6900:*:*:-:*:*:*6.9 build6900VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6901:*:*:-:*:*:*6.9 build6901VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6902:*:*:-:*:*:*6.9 build6902VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6903:*:*:-:*:*:*6.9 build6903VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6904:*:*:-:*:*:*6.9 build6904VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:*:*:*:-:*:*:*7.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7000:*:*:-:*:*:*7.0 build7000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7001:*:*:-:*:*:*7.0 build7001VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7002:*:*:-:*:*:*7.0 build7002VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7003:*:*:-:*:*:*7.0 build7003VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_it360:*:*:*:*:-:*:*:*up to 10.3.3VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_it360:*:*:*:*:managed_service_providers:*:*:*up to 10.3.3VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.0:*:*:*:managed_service_providers:*:*:*5.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.1:*:*:*:managed_service_providers:*:*:*5.1VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.2:*:*:*:managed_service_providers:*:*:*5.2VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.3:*:*:*:managed_service_providers:*:*:*5.3VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.4:*:*:*:managed_service_providers:*:*:*5.4VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.0:*:*:*:managed_service_providers:*:*:*6.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.0:build6002:*:*:managed_service_providers:*:*:*6.0 build6002VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.1:*:*:*:managed_service_providers:*:*:*6.1VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.1:build6104:*:*:managed_service_providers:*:*:*6.1 build6104VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.2:*:*:*:managed_service_providers:*:*:*6.2VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.2:build6201:*:*:managed_service_providers:*:*:*6.2 build6201VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.3:*:*:*:managed_service_providers:*:*:*6.3VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:*:*:*:managed_service_providers:*:*:*6.4VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6401:*:*:managed_service_providers:*:*:*6.4 build6401VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6402:*:*:managed_service_providers:*:*:*6.4 build6402VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6403:*:*:managed_service_providers:*:*:*6.4 build6403VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6404:*:*:managed_service_providers:*:*:*6.4 build6404VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:*:*:*:managed_service_providers:*:*:*6.5VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:build6503:*:*:managed_service_providers:*:*:*6.5 build6503VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:build6504:*:*:managed_service_providers:*:*:*6.5 build6504VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:build6505:*:*:managed_service_providers:*:*:*6.5 build6505VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.6:build6600:*:*:managed_service_providers:*:*:*6.6 build6600VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.7:build6700:*:*:managed_service_providers:*:*:*6.7 build6700VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.7:build6701:*:*:managed_service_providers:*:*:*6.7 build6701VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6800:*:*:managed_service_providers:*:*:*6.8 build6800VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6801:*:*:managed_service_providers:*:*:*6.8 build6801VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6802:*:*:managed_service_providers:*:*:*6.8 build6802VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6803:*:*:managed_service_providers:*:*:*6.8 build6803VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:*:*:*:managed_service_providers:*:*:*6.9VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6900:*:*:managed_service_providers:*:*:*6.9 build6900VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6901:*:*:managed_service_providers:*:*:*6.9 build6901VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6902:*:*:managed_service_providers:*:*:*6.9 build6902VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6903:*:*:managed_service_providers:*:*:*6.9 build6903VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6904:*:*:managed_service_providers:*:*:*6.9 build6904VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:*:*:*:managed_service_providers:*:*:*7.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7000:*:*:managed_service_providers:*:*:*7.0 build7000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7001:*:*:managed_service_providers:*:*:*7.0 build7001VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7002:*:*:managed_service_providers:*:*:*7.0 build7002VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7003:*:*:managed_service_providers:*:*:*7.0 build7003VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.3:*:*:*:-:*:*:* Versions 6.3 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:*:*:*:-:*:*:* Versions 6.4 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6401:*:*:-:*:*:* Versions 6.4 build6401 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6402:*:*:-:*:*:* Versions 6.4 build6402 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6403:*:*:-:*:*:* Versions 6.4 build6403 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6404:*:*:-:*:*:* Versions 6.4 build6404 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:*:*:*:-:*:*:* Versions 6.5 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:build6503:*:*:-:*:*:* Versions 6.5 build6503 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:build6504:*:*:-:*:*:* Versions 6.5 build6504 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:build6505:*:*:-:*:*:* Versions 6.5 build6505 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.6:build6600:*:*:-:*:*:* Versions 6.6 build6600 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.7:build6700:*:*:-:*:*:* Versions 6.7 build6700 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.7:build6701:*:*:-:*:*:* Versions 6.7 build6701 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6800:*:*:-:*:*:* Versions 6.8 build6800 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6801:*:*:-:*:*:* Versions 6.8 build6801 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6802:*:*:-:*:*:* Versions 6.8 build6802 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6803:*:*:-:*:*:* Versions 6.8 build6803 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:*:*:*:-:*:*:* Versions 6.9 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6900:*:*:-:*:*:* Versions 6.9 build6900 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6901:*:*:-:*:*:* Versions 6.9 build6901 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6902:*:*:-:*:*:* Versions 6.9 build6902 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6903:*:*:-:*:*:* Versions 6.9 build6903 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6904:*:*:-:*:*:* Versions 6.9 build6904 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:*:*:*:-:*:*:* Versions 7.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7000:*:*:-:*:*:* Versions 7.0 build7000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7001:*:*:-:*:*:* Versions 7.0 build7001 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7002:*:*:-:*:*:* Versions 7.0 build7002 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7003:*:*:-:*:*:* Versions 7.0 build7003 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_it360:*:*:*:*:-:*:*:* Versions up to 10.3.3 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_it360:*:*:*:*:managed_service_providers:*:*:* Versions up to 10.3.3 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.0:*:*:*:managed_service_providers:*:*:* Versions 5.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.1:*:*:*:managed_service_providers:*:*:* Versions 5.1 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.2:*:*:*:managed_service_providers:*:*:* Versions 5.2 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.3:*:*:*:managed_service_providers:*:*:* Versions 5.3 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:5.4:*:*:*:managed_service_providers:*:*:* Versions 5.4 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.0:*:*:*:managed_service_providers:*:*:* Versions 6.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.0:build6002:*:*:managed_service_providers:*:*:* Versions 6.0 build6002 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.1:*:*:*:managed_service_providers:*:*:* Versions 6.1 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.1:build6104:*:*:managed_service_providers:*:*:* Versions 6.1 build6104 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.2:*:*:*:managed_service_providers:*:*:* Versions 6.2 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.2:build6201:*:*:managed_service_providers:*:*:* Versions 6.2 build6201 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.3:*:*:*:managed_service_providers:*:*:* Versions 6.3 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:*:*:*:managed_service_providers:*:*:* Versions 6.4 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6401:*:*:managed_service_providers:*:*:* Versions 6.4 build6401 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6402:*:*:managed_service_providers:*:*:* Versions 6.4 build6402 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6403:*:*:managed_service_providers:*:*:* Versions 6.4 build6403 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.4:build6404:*:*:managed_service_providers:*:*:* Versions 6.4 build6404 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:*:*:*:managed_service_providers:*:*:* Versions 6.5 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:build6503:*:*:managed_service_providers:*:*:* Versions 6.5 build6503 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:build6504:*:*:managed_service_providers:*:*:* Versions 6.5 build6504 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.5:build6505:*:*:managed_service_providers:*:*:* Versions 6.5 build6505 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.6:build6600:*:*:managed_service_providers:*:*:* Versions 6.6 build6600 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.7:build6700:*:*:managed_service_providers:*:*:* Versions 6.7 build6700 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.7:build6701:*:*:managed_service_providers:*:*:* Versions 6.7 build6701 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6800:*:*:managed_service_providers:*:*:* Versions 6.8 build6800 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6801:*:*:managed_service_providers:*:*:* Versions 6.8 build6801 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6802:*:*:managed_service_providers:*:*:* Versions 6.8 build6802 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.8:build6803:*:*:managed_service_providers:*:*:* Versions 6.8 build6803 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:*:*:*:managed_service_providers:*:*:* Versions 6.9 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6900:*:*:managed_service_providers:*:*:* Versions 6.9 build6900 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6901:*:*:managed_service_providers:*:*:* Versions 6.9 build6901 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6902:*:*:managed_service_providers:*:*:* Versions 6.9 build6902 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6903:*:*:managed_service_providers:*:*:* Versions 6.9 build6903 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:6.9:build6904:*:*:managed_service_providers:*:*:* Versions 6.9 build6904 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:*:*:*:managed_service_providers:*:*:* Versions 7.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7000:*:*:managed_service_providers:*:*:* Versions 7.0 build7000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7001:*:*:managed_service_providers:*:*:* Versions 7.0 build7001 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7002:*:*:managed_service_providers:*:*:* Versions 7.0 build7002 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:7.0:build7003:*:*:managed_service_providers:*:*:* Versions 7.0 build7003 Vulnerable ·Zohocorp

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-3997
  2. 2026-10-03 Alias added: GHSA-72w4-9phv-wp38

References

Exploit 4

  • TI-2014-06533 The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications… CVSS 3.1HIGH 7.5
  • TI-2014-06535 Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build… CVSS 2.0HIGH 7.5
  • TI-2014-06537 Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4… CVSS 2.0HIGH 7.5
  • TI-2014-04443 Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer… CVSS 2.0MEDIUM 5.0
  • TI-2014-04982 Directory traversal vulnerability in the… CVSS 2.0MEDIUM 5.0
  • TI-2014-06536 SQL injection vulnerability in the… CVSS 2.0HIGH 7.5
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences