PT-2026-2436 · Manageengine · Password Manager Pro+2

Published 2026-01-13 · Updated 2026-01-13 · CVE-2025-11669

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions ManageEngine PAM360 versions prior to 8202 Password Manager Pro versions prior to 13221 Access Manager Plus versions prior to 4401

Description The software is subject to an authorization issue within the initiate remote session functionality.

Recommendations Update ManageEngine PAM360 to version 8202 or later. Update Password Manager Pro to version 13221 or later. Update Access Manager Plus to version 4401 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-11669

Affected Products

Access Manager Plus

Manageengine Pam360

Password Manager Pro

References · 6

• https://manageengine.com/privileged-access-management/advisory/cve-2025-11669.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-11669 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11669 · Security Note
• https://twitter.com/VulmonFeeds/status/2011134537158320319 · Twitter Post
• https://twitter.com/CVEnew/status/2011089098035896495 · Twitter Post
• https://twitter.com/TheHackerWire/status/2011087161181835573 · Twitter Post