Manageengine Password Manager Pro — known CVE vulnerabilities

Every CVE whose affected-product data names Manageengine Password Manager Pro, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2014-3996 — CVSS 7.5 (high): SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service…
• CVE-2014-8499 — CVSS 6.5 (medium): Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP)…
• CVE-2014-9372 — CVSS 6.4 (medium): Directory traversal vulnerability in the UploadAccountActivities servlet in ManageEngine Password Manager Pro (PMP) before 7103 allows…
• CVE-2009-4387 — CVSS 4.3 (medium): The cross-site scripting (XSS) protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro (PMP) before 6.1…