ManageEngine security advisory—Important security fixes released for ManageEngine Password Manager Pro

ManageEngine security advisory—Important security fixes released for ManageEngine Password Manager Pro

Hi there,

This security advisory is to let you know that an authenticated SQL Injection vulnerability was identified in Password Manager Pro, The vulnerability has been addressed, and the issue does not exist in the fixed version.

 

CVE ID: CVE-2026-14828

 

Severity : High

 

Product Name

Affected Version(s)

Fixed Version(s)

Fixed On

Password Manager Pro

Till 13234

13235

July 7, 2026

 

(Please note that this vulnerability applies to only those who have installed or upgraded to the above mentioned version)

 

Impact:

The SQL injection vulnerability allows an adversary to craft a malicious query to execute unintended SQL operations on the database.

Steps to Upgrade:

  1. Download the latest upgrade pack from the following link

  1. Apply the latest build to your existing product installation as per the upgrade pack instructions provided in the above links.

 

Please contact the product support for further details at the below mentioned email addresses:

​

Password Manager Pro: passwordmanagerpro-support@manageengine.com


Thanks,

Dhamodhara Reddy

Head -Enterprise Support

      • Sticky Posts

      • Complimentary webinar: Reinforcing IT security with privileged account management

        Join us as we explore strategies to combat cybercrime and reinforce IT security. Date: December 1, 2016  Time:  1) Australia -  2:00 PM to 3:00 PM AEDT (Register here)                2) United Kingdom - 10:00 AM to 11:00 AM GMT (Register here) In this webinar, we will cover: 1) The access points through which criminals can enter your IT kingdom 2) How to identity thefts and sabotages 3) How privileged account management can protect the door to your IT kingdom 4) A live demo of Password Manager Pro
      • Request FREE technical consultation on using Password Manager Pro

        Hi, If you are evaluating Password Manager Pro or if you are just installing it to production after purchase, you can tell us what you are trying to achieve and request technical consultation absolutely FREE of cost. We will assist you in accomplishing your goals. This free consulting service is offered to enable you exploit the full potential of the product. Just fill-in this online form and submit your contact details. Our technical consultant will get in touch with you. Thanks, Bala ManageEngine
      • Success Story: Password Manager Pro helps leading supply chain management solution provider bolster the security of IT infrastructure

        The IT department of GoFrugal Technologies, which specializes in retail, retail distribution and supply chain management solutions, found it challenging to properly maintain the proliferating administrative passwords of these IT systems.  While security systems are in place to guard the infrastructure against external threats, GoFrugal wanted to strengthen its mechanism to rule out any possible internal breaches as well. Especially, access to the sensitive administrative passwords, which give unlimited
      • Password Manager Pro: Best Practices Guide

        Hi, While deploying Password Manager Pro in enterprise environment, adherence to certain best practices could help bolster data security.  To offer guidance to IT administrators in this direction, we have prepared a best practices guide. Best practices during all stages - product installation, configuration, data population and organization, deployment and maintenance have been explained with special focus on data security. In addition, the best password management practices in general have also
      • Combating Cyber Security Threats - Advisory

        Hi, Of late, cyber-criminal activities across the globe have assumed such grave proportions that all enterprises - big and small, are exposed to security breaches and identity thefts of various kinds. Many sabotage were found to have been caused by the insiders of the enterprises - either disgruntled staff or greedy techies or sacked employees. Lack of well-defined internal controls and access restrictions generally pave the way for security incidents. Particularly, as stolen identities seem to have

                        New to ADSelfService Plus?