CVEvulnerability

CVE-2022-40300

9.8 CRITICAL Published 2022-09-16 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2022-09-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89

Description

Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection vulnerabilities.

Affected configurations

• zohocorp manageengine access manager plus 4.0 • zohocorp manageengine access manager plus 4.1 • zohocorp manageengine access manager plus 4.2 • zohocorp manageengine access manager plus 4.3 • zohocorp manageengine pam360 4.0 • zohocorp manageengine pam360 4.1 • zohocorp manageengine pam360 4.5 • zohocorp manageengine pam360 5.0 • zohocorp manageengine pam360 5.1 • zohocorp manageengine pam360 5.2 • zohocorp manageengine pam360 5.3 • zohocorp manageengine pam360 5.4 • zohocorp manageengine pam360 5.5 • zohocorp manageengine password manager pro 4.6 • zohocorp manageengine password manager pro 4.7 • zohocorp manageengine password manager pro 4.8 • zohocorp manageengine password manager pro 5.0 • zohocorp manageengine password manager pro 5.1 • zohocorp manageengine password manager pro 5.2 • zohocorp manageengine password manager pro 5.3 • zohocorp manageengine password manager pro 5.4 • zohocorp manageengine password manager pro 6.0 • zohocorp manageengine password manager pro 6.1 • zohocorp manageengine password manager pro 6.2 • zohocorp manageengine password manager pro 6.3 • zohocorp manageengine password manager pro 6.4 • zohocorp manageengine password manager pro 6.5 • zohocorp manageengine password manager pro 6.6 • zohocorp manageengine password manager pro 6.7 • zohocorp manageengine password manager pro 6.8 • zohocorp manageengine password manager pro 6.9 • zohocorp manageengine password manager pro 7.0 • zohocorp manageengine password manager pro 7.1 • zohocorp manageengine password manager pro 7.5 • zohocorp manageengine password manager pro 7.6 • zohocorp manageengine password manager pro 8.0 • zohocorp manageengine password manager pro 8.1 • zohocorp manageengine password manager pro 8.2 • zohocorp manageengine password manager pro 8.3 • zohocorp manageengine password manager pro 8.4 • zohocorp manageengine password manager pro 8.5 • zohocorp manageengine password manager pro 8.6 • zohocorp manageengine password manager pro 8.7 • zohocorp manageengine password manager pro 9.0 • zohocorp manageengine password manager pro 9.1 • zohocorp manageengine password manager pro 9.2 • zohocorp manageengine password manager pro 9.3 • zohocorp manageengine password manager pro 9.4 • zohocorp manageengine password manager pro 9.5 • zohocorp manageengine password manager pro 9.6 • zohocorp manageengine password manager pro 9.7 • zohocorp manageengine password manager pro 9.8 • zohocorp manageengine password manager pro 9.9 • zohocorp manageengine password manager pro 10.0 • zohocorp manageengine password manager pro 10.1 • zohocorp manageengine password manager pro 10.2 • zohocorp manageengine password manager pro 10.3 • zohocorp manageengine password manager pro 10.4 • zohocorp manageengine password manager pro 11.1 • zohocorp manageengine password manager pro 11.2 … and 3 more

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References