Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2025-11669

Broken Access Control

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zohocorp

Description

Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zohocorp ManageEngine PAM360

Default version status: unaffected

  • 0 to < 8202affected

Zohocorp ManageEngine Password Manager Pro

Default version status: unaffected

  • 0 to < 13221affected

Zohocorp ManageEngine Access Manager Plus

Default version status: unaffected

  • 0 to < 4401affected

References