Product NameAffected Version(s)Fixed VersionFixed on
Password Manager Pro12430 and below1243114/06/2024
PAM3607000 and below700114/06/2024

Details
An SQL injection vulnerability was discovered in the above ManageEngine solutions. The development team has fixed this issue and the vulnerability no longer exists.

What should you do?
It is advised to backup your system and follow the necessary steps to upgrade to the latest build.

Steps to upgrade
Password Manager Pro: Download the latest service pack here.

PAM360: Download the latest service pack here.

Apply the latest build to your existing product installation as per the upgrade pack instructions in the link provided above.

Important Note: Don’t forget to make a backup of your installation folder before you upgrade and keep the backup in a separate location. If anything goes wrong, you will have this copy as a backup which will keep all your settings intact. If you’re using an MS SQL server as the back-end database, back up the application database before upgrading. Once the upgrade is successfully completed, remember to delete the backup.

For more information or if you have any questions/concerns feel free to contact us

This article is relevant to:
IT SecurityManageEngineSecurity Advisory

You may be interested in these other recent articles

Latest Updates for ManageEngine ServiceDesk Plus Cloud

31 March 2025

Discover the latest ServiceDesk Plus Cloud updates, including new features, fixes, and enhancements.

Read more

Migrate From ServiceNow to ServiceDesk Plus

28 March 2025

ServiceNow to ServiceDesk Plus Migrating your service desk platform is a big decision, and it can feel overwhelming. If you’re currently using ServiceNow but looking…

Read more

Latest Updates for ManageEngine Endpoint Central

Discover the latest Endpoint Central updates, including new features, fixes, and enhancements.

Read more

Migrating to ServiceDesk Plus Cloud

19 March 2025

Migrating to ManageEngine ServiceDesk Plus Cloud from the on-premise edition is not a simple lift-and-shift process due to architectural differences. While both versions offer similar…

Read more

Expert Guidance on Migrating to Endpoint Central Cloud

14 March 2025

At Set3 Solutions, the award-winning UK technology partner of ManageEngine, we regularly help organisations better understand and optimise their ManageEngine applications. In this case, we…

Read more