CVE-2024-27312: Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This…

PriorityP348high8.1CVSS 3.1

AVNACLPRLUINSUCHIHAN

EPSS

0.90%

55.1th percentile

Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
manageengine	pam360	>= 6601 < 6602	6602
zohocorp	manageengine_pam360	< 6.6	6.6
zohocorp	manageengine_pam360	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.