Critical severity9.8NVD Advisory· Published Dec 20, 2021· Updated Jun 17, 2026
CVE-2021-44525
CVE-2021-44525
Description
Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required.
Affected products
25- Zoho/ManageEngine PAM360description
- Range: <5303
cpe:2.3:a:zohocorp:manageengine_pam360:4.0:*:*:*:*:*:*:*+ 22 more
- cpe:2.3:a:zohocorp:manageengine_pam360:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:4.0:build4001:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:4.0:build4002:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:4.1:build4100:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:4.1:build4101:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:4.5:*:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:4.5:build4500:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:4.5:build4501:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.0:build5000:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.0:build5001:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.0:build5002:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.0:build5003:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.0:build5004:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.1:build5100:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.2:build5200:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.3:*:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.3:build5300:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.3:build5301:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_pam360:5.3:build5302:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.