ManageEngine security advisory—Important security fixes released for ManageEngine Password Manager Pro
Hi there,
This security advisory is to let you know that security vulnerabilities of high severity were detected in ManageEngine Password Manager Pro.
Severity: High.
What is the issue?
An SQL Injection vulnerability was identified in Password Manager Pro, along with a separate Remote Code Execution vulnerability via third-party library. Both vulnerabilities have been addressed, and neither issue exists in the fixed version.
Version details
Product Name | Affected Version(s) | Fixed Version(s) | Fixed On |
Password Manager Pro | Till 13230 | 13231 | April 7, 2026 |
(Please note that this vulnerability applies to only those who have installed or upgraded to the above mentioned versions).
Impact:
The SQL injection vulnerability allows an adversary with a Password Auditor role to execute custom queries, and escalate to Privileged Administrator and perform sensitive actions. For more details on the vulnerability, please click here.
Additionally, the third-party library's API was found to be vulnerable to Remote Code Execution.
What should customers do?
Given the severity of this vulnerability, customers are strongly advised to upgrade to the latest build of Password Manager Pro immediately.
Steps to Upgrade:
Download the latest upgrade pack from the following link:
Password Manager Pro - https://www.manageengine.com/products/passwordmanagerpro/upgradepack.html
Apply the latest upgrade pack to your existing product installation as per the upgrade pack instructions provided in the above link.
Please contact our product support team for further details at the below mentioned email addresses:
Password Manager Pro: passwordmanagerpro-support@manageengine.com
Important note: We strongly recommend that you take a backup of your entire Password Manager Pro installation folder before the upgrade, and keep the copy in a separate location. This helps you prevent any accidental loss of data, and will keep all your settings intact. If you're using an MS SQL server as the back-end database, backup the Password Manager Pro database as well before upgrading. Once the upgrade is successfully completed, remember to delete the backup.
Thanks,
Dhamodhara Reddy
Head -Enterprise Support
Toll-Free: +1 888 720 9500
Sticky Posts
Complimentary webinar: Reinforcing IT security with privileged account management
Join us as we explore strategies to combat cybercrime and reinforce IT security. Date: December 1, 2016 Time: 1) Australia - 2:00 PM to 3:00 PM AEDT (Register here) 2) United Kingdom - 10:00 AM to 11:00 AM GMT (Register here) In this webinar, we will cover: 1) The access points through which criminals can enter your IT kingdom 2) How to identity thefts and sabotages 3) How privileged account management can protect the door to your IT kingdom 4) A live demo of Password Manager ProRequest FREE technical consultation on using Password Manager Pro
Hi, If you are evaluating Password Manager Pro or if you are just installing it to production after purchase, you can tell us what you are trying to achieve and request technical consultation absolutely FREE of cost. We will assist you in accomplishing your goals. This free consulting service is offered to enable you exploit the full potential of the product. Just fill-in this online form and submit your contact details. Our technical consultant will get in touch with you. Thanks, Bala ManageEngineSuccess Story: Password Manager Pro helps leading supply chain management solution provider bolster the security of IT infrastructure
The IT department of GoFrugal Technologies, which specializes in retail, retail distribution and supply chain management solutions, found it challenging to properly maintain the proliferating administrative passwords of these IT systems. While security systems are in place to guard the infrastructure against external threats, GoFrugal wanted to strengthen its mechanism to rule out any possible internal breaches as well. Especially, access to the sensitive administrative passwords, which give unlimitedPassword Manager Pro: Best Practices Guide
Hi, While deploying Password Manager Pro in enterprise environment, adherence to certain best practices could help bolster data security. To offer guidance to IT administrators in this direction, we have prepared a best practices guide. Best practices during all stages - product installation, configuration, data population and organization, deployment and maintenance have been explained with special focus on data security. In addition, the best password management practices in general have alsoCombating Cyber Security Threats - Advisory
Hi, Of late, cyber-criminal activities across the globe have assumed such grave proportions that all enterprises - big and small, are exposed to security breaches and identity thefts of various kinds. Many sabotage were found to have been caused by the insiders of the enterprises - either disgruntled staff or greedy techies or sacked employees. Lack of well-defined internal controls and access restrictions generally pave the way for security incidents. Particularly, as stolen identities seem to have
