← Database

CVE-2021-44525

CRITICAL CVSS: 9.8 Published: 2021-12-20 Modified: 2026-06-17

Description

Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required.

Affected Platforms

Zohocorp Manageengine Pam360

Weakness Type

CWE-287

References