NetSight
critical9.8

CVE-2022-43672

Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a different software compo…

Impact

Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a different software component relative to CVE-2022-43671.

Affected products

VendorProductAffected versions
ZohocorpManageengine Access Manager Plus
before 4.3
Version 4.3
ZohocorpManageengine Pam360
before 5.7
Version 5.7
ZohocorpManageengine Password Manager Pro
before 12.1
Version 12.1

Weakness classification

References