ManageEngine security advisory—Important security fixes released for ManageEngine Password Manager Pro

ManageEngine security advisory—Important security fixes released for ManageEngine Password Manager Pro

Hi there,

 

This security advisory is to let you know that multiple security vulnerabilities of high severity was detected in ManageEngine Password Manager Pro.

 

Severity: High.

 

What is the issue?

SQL Injection and Authentication Bypass vulnerabilities were identified in Password Manager Pro. We have fixed the issues, and the vulnerabilities no longer exist in the fixed version.

 

Version details

 

Product Name

Issues

Affected Version(s)

Fixed Version(s)

Fixed On

Password Manager Pro

SQL Injection, Authentication Bypass

Till 13231

13232

June 9, 2026

Password Manager Pro

SQL Injection

Till 13232

13233

June 12, 2026

 

(Please note that this vulnerability applies to only those who have installed or upgraded to the above mentioned version)

Impact:

The Authentication Bypass vulnerability allows any authenticated user to log in to Password Manager Pro as any other user, resulting in unauthorized access. The SQL injection vulnerability allows an adversary to craft a malicious query to execute unintended SQL operations on the database.

What should customers do?

Given the severity of this vulnerability, customers are strongly advised to upgrade to the latest build of Password Manager Pro immediately.

 

Steps to Upgrade:

  1. Download the latest upgrade pack from the following link

Password Manager Pro -  https://www.manageengine.com/products/passwordmanagerpro/upgradepack.html

  1. Apply the latest upgrade pack to your existing product installation as per the upgrade pack instructions provided in the above link.

 

Please contact our product support team for further details at

passwordmanagerpro-support@manageengine.com.

 

Important note: We strongly recommend that you take a backup of your entire Password Manager Pro installation folder before the upgrade, and keep the copy in a separate location. This helps you prevent any accidental loss of data, and will keep all your settings intact. If you're using an MS SQL server as the back-end database, backup the Password Manager Pro database as well before upgrading. Once the upgrade is successfully completed, remember to delete the backup.

 

Please ignore this mail if you have installed the latest build of Password Manager Pro. We express our sincerest apologies for any inconvenience this may have caused.

 

Regards,

ManageEngine PAM Team