CVE-2022-40300
critical · 9.8Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection vulnerabilities.
9.8
CVSS
99.1%
EPSS (exploit prob.)
100th
EPSS percentile
2022-09-16
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| zohocorp | manageengine_access_manager_plus | 4.0 |
| zohocorp | manageengine_access_manager_plus | 4.1 |
| zohocorp | manageengine_access_manager_plus | 4.1 |
| zohocorp | manageengine_access_manager_plus | 4.2 |
| zohocorp | manageengine_access_manager_plus | 4.2 |
| zohocorp | manageengine_access_manager_plus | 4.2 |
| zohocorp | manageengine_access_manager_plus | 4.2 |
| zohocorp | manageengine_access_manager_plus | 4.3 |
| zohocorp | manageengine_access_manager_plus | 4.3 |
| zohocorp | manageengine_access_manager_plus | 4.3 |
| zohocorp | manageengine_access_manager_plus | 4.3 |
| zohocorp | manageengine_access_manager_plus | 4.3 |
| zohocorp | manageengine_pam360 | 4.0 |
| zohocorp | manageengine_pam360 | 4.0 |
| zohocorp | manageengine_pam360 | 4.0 |
| zohocorp | manageengine_pam360 | 4.1 |
| zohocorp | manageengine_pam360 | 4.1 |
| zohocorp | manageengine_pam360 | 4.1 |
| zohocorp | manageengine_pam360 | 4.5 |
| zohocorp | manageengine_pam360 | 4.5 |
| zohocorp | manageengine_pam360 | 4.5 |
| zohocorp | manageengine_pam360 | 5.0 |
| zohocorp | manageengine_pam360 | 5.0 |
| zohocorp | manageengine_pam360 | 5.0 |
| zohocorp | manageengine_pam360 | 5.0 |
| zohocorp | manageengine_pam360 | 5.0 |
| zohocorp | manageengine_pam360 | 5.0 |
| zohocorp | manageengine_pam360 | 5.1 |
| zohocorp | manageengine_pam360 | 5.1 |
| zohocorp | manageengine_pam360 | 5.2 |
| zohocorp | manageengine_pam360 | 5.2 |
| zohocorp | manageengine_pam360 | 5.3 |
| zohocorp | manageengine_pam360 | 5.3 |
| zohocorp | manageengine_pam360 | 5.3 |
| zohocorp | manageengine_pam360 | 5.3 |
| zohocorp | manageengine_pam360 | 5.3 |
| zohocorp | manageengine_pam360 | 5.3 |
| zohocorp | manageengine_pam360 | 5.3 |
| zohocorp | manageengine_pam360 | 5.3 |
| zohocorp | manageengine_pam360 | 5.4 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2022-40300