8.8
CVE-2026-12263
- EPSS 0.7%
- Veröffentlicht 13.08.2026 10:18:35
- Zuletzt bearbeitet 13.08.2026 15:19:28
- CVE-Watchlists
- Unerledigt
Authentication Bypass
Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerZohocorp
≫
Produkt
ManageEngine Password Manager Pro
Default Statusunaffected
Version
0
Version <
13232
Status
affected
HerstellerZohocorp
≫
Produkt
ManageEngine PAM360
Default Statusunaffected
Version
0
Version <
8551
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.7% | 0.499 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 0fc0942c-577d-436f-ae8e-945763c79b02 | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-347 Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-12263.html