Product Name | Affected Version(s) | Fixed Version | Fixed on |
Password Manager Pro | 12430 and below | 12431 | 14/06/2024 |
PAM360 | 7000 and below | 7001 | 14/06/2024 |
Details
An SQL injection vulnerability was discovered in the above ManageEngine solutions. The development team has fixed this issue and the vulnerability no longer exists.
What should you do?
It is advised to backup your system and follow the necessary steps to upgrade to the latest build.
Steps to upgrade
Password Manager Pro: Download the latest service pack here.
PAM360: Download the latest service pack here.
Apply the latest build to your existing product installation as per the upgrade pack instructions in the link provided above.
Important Note: Don’t forget to make a backup of your installation folder before you upgrade and keep the backup in a separate location. If anything goes wrong, you will have this copy as a backup which will keep all your settings intact. If you’re using an MS SQL server as the back-end database, back up the application database before upgrading. Once the upgrade is successfully completed, remember to delete the backup.
For more information or if you have any questions/concerns feel free to contact us
This article is relevant to:
IT SecurityManageEngineSecurity AdvisoryOther recent articles in the same category
You may be interested in these other recent articles
PAM360 Failover Server Setup: Key Considerations
17 October 2025
Setting up a failover server in PAM360 can be tricky. Learn the essentials of PAM360 failover server setup to keep your privileged access environment resilient,…
Read moreLatest Updates for ManageEngine ServiceDesk Plus Cloud
15 October 2025
Discover the latest ServiceDesk Plus Cloud updates, including new features, fixes, and enhancements.
Read moreStay Ahead with the Latest Updates for ManageEngine Password Manager Pro
14 October 2025
Discover the latest Password Manager Pro updates, including new features, fixes, and enhancements.
Read moreStay Ahead with the Latest Updates for ADManager Plus
13 October 2025
Discover the latest ADManager Plus updates, including new features, fixes, and enhancements.
Read moreServiceDesk Plus: Reset Admin Account Even with 2FA
3 October 2025
If you need to reset an admin account in ServiceDesk Plus, getting locked out of your environment can be stressful, especially when two-factor authentication (2FA)…
Read more