High severity8.8NVD Advisory· Published Mar 16, 2020· Updated Jun 17, 2026
CVE-2020-9346
CVE-2020-9346
Description
Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery (CSRF) attacks, as demonstrated by changing a user's role.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:*:*:*:*range: <10.4
- cpe:2.3:a:zohocorp:manageengine_password_manager_pro:10.4:-:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_password_manager_pro:10.4:build10400:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_password_manager_pro:10.4:build10401:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_password_manager_pro:10.4:build10402:*:*:*:*:*:*
- Zoho/ManageEngine Password Manager Prodescription
- Range: <=10.4
Patches
Vulnerability mechanics
References
2- www.infigo.hr/upload/web_struktura/Zoho_ManageEngine_Password_Manager_Pro_10.4_CSRF.txtnvdThird Party Advisory
- www.manageengine.com/products/passwordmanagerpro/issues-fixed.htmlnvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.