Known vulnerabilities in Password Manager Pro

Vendor: Zoho Corporation
Software: Password Manager Pro
Software CPE: cpe:2.3:a:zohocorp:password_manager_pro:*:*:*:*:*:*:*:*
Website: https://www.zohocorp.com/index.html
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Password Manager Pro Password Manager Pro is affected by 13 known vulnerabilities: 1 high, 5 medium, 7 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84527 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Medium
No
No
 12401 18.12.2023 SB2023121847
#VU84526 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Medium
No
No
 12400 18.12.2023 SB2023121846
#VU84525 - Permissions, Privileges, and Access Controls
 CWE-264 Low
No
No
 12400 18.12.2023 SB2023121846
#VU84524 - Permissions, Privileges, and Access Controls
 CWE-264 Low
No
No
 12340 18.12.2023 SB2023121845
#VU84523 - Permissions, Privileges, and Access Controls
 CWE-264 Low
No
No
 12330 18.12.2023 SB2023121844
#VU84522 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Low
No
No
 12330 18.12.2023 SB2023121844
#VU84521 - Permissions, Privileges, and Access Controls
 CWE-264 Low
No
No
 12330 18.12.2023 SB2023121844
#VU84520 - Permissions, Privileges, and Access Controls
 CWE-264 Low
No
No
 12330 18.12.2023 SB2023121844
#VU84519 - Permissions, Privileges, and Access Controls
 CWE-264 Low
No
No
 12310 18.12.2023 SB2023121843
#VU84518 - Improper Certificate Validation
 CWE-295 Medium
No
No
 12220 18.12.2023 SB2023012574
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 12401 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU71210 - Improper input validation
CVE-2022-47966		 CWE-20 High
Available
Exploited
 12124 17.01.2023 SB2023011717
SB2023011718
#VU70548 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-47523		 CWE-89 Medium
No
No
 12210 01.01.2023 SB2023010102
SB2023010703
SB2023011720
and 1 more