CoreCVE
Back

CRITICAL

Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature

Published Mar 16, 2020

Description

Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the vendor disputes the significance of this report because they expect CSV risk mitigation to be provided by an external application, and do not plan to add CSV constraints to their own products

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-1236

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Mar 16, 2020
Updated Aug 4, 2024
Reserved Feb 23, 2020
Link CVE-2020-9347
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-9347
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-9347