CVE-2016-1161

High

Published: 20/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2016-1161 is a Cross-site request forgery (CSRF) vulnerability in ManageEngine Password Manager Pro before version 8.5 (Build 8500).

Risk Assessment

An attacker could exploit this vulnerability to perform unauthorized actions on behalf of a logged-in user, potentially leading to data exposure or unauthorized changes in the system.

Recommendation

It is recommended to upgrade ManageEngine Password Manager Pro to version 8.5 (Build 8500) or later to mitigate this vulnerability.

Other vulnerabilities in ManageEngine Password Manager Pro

See all

CVE-2026-12263High
Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.
CVE-2026-11840High
Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection.

Original NVD description (English source)

Cross-site request forgery (CSRF) vulnerability in ManageEngine Password Manager Pro before 8.5 (Build 8500).