---
id: "CVE-2022-35405"
kind: "vulnerability"
aliases: ["CVE-2022-35405"]
title: "Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote\u2026"
severity: "critical"
cvss: 9.8
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Zoho ManageEngine", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "zohocorp manageengine access manager plus", "fixed": ["4.3"], "affected": "< 4.3", "ecosystem": "vendor"}, {"name": "zohocorp manageengine access manager plus", "fixed": [], "affected": "= 4.3", "ecosystem": "vendor"}, {"name": "zohocorp manageengine pam360", "fixed": ["5.5"], "affected": "< 5.5", "ecosystem": "vendor"}, {"name": "zohocorp manageengine pam360", "fixed": [], "affected": "= 5.5", "ecosystem": "vendor"}, {"name": "zohocorp manageengine password manager pro", "fixed": ["12.1"], "affected": "< 12.1", "ecosystem": "vendor"}, {"name": "zohocorp manageengine password manager pro", "fixed": [], "affected": "= 12.1", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["access-manager-plus", "exploited", "manageengine", "pam360", "password-manager-pro", "vendor", "zoho"]
not_affected_if: ["unknown"]
published_at: "2022-07-19T15:15:08+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-35405", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35405", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote…

Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified flaw that allows remote code execution. CISA lists it as actively exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Zoho ManageEngine affected ? fixed ?
- vendor:zohocorp manageengine access manager plus affected < 4.3 fixed 4.3
- vendor:zohocorp manageengine access manager plus affected = 4.3 fixed ?
- vendor:zohocorp manageengine pam360 affected < 5.5 fixed 5.5
- vendor:zohocorp manageengine pam360 affected = 5.5 fixed ?
- vendor:zohocorp manageengine password manager pro affected < 12.1 fixed 12.1
- vendor:zohocorp manageengine password manager pro affected = 12.1 fixed ?

## How to check

Identify the installed PAM360, Password Manager Pro, or Access Manager Plus version and compare it with the vendor advisory; the sources do not give the affected version range.

## Fix

Apply the vendor update for the affected product, per CISA's required action; the sources do not name the fixed version.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-35405
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2022-35405

## From the sources

Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_