NetSight
critical9.8

CVE-2022-43671

Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection.

Impact

Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection.

Affected products

VendorProductAffected versions
ZohocorpManageengine Access Manager Plus
before 4.3
Version 4.3
ZohocorpManageengine Pam360
before 5.7
Version 5.7
ZohocorpManageengine Password Manager Pro
before 12.1
Version 12.1

Weakness classification

References