PT-2022-25337

CVE-2022-40300

·

Published

2022-09-16

·

Updated

2025-11-06

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Password Manager Pro versions 12120 through 12120 Zoho ManageEngine PAM360 versions 5550 through 5550 Zoho ManageEngine Access Manager Plus versions 4304 through 4304
Description The issue involves multiple SQL injection vulnerabilities.
Recommendations For Zoho ManageEngine Password Manager Pro version 12120, update to version 12121 or later. For Zoho ManageEngine PAM360 version 5550, update to version 5600 or later. For Zoho ManageEngine Access Manager Plus version 4304, update to version 4305 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Related identifiers
CVE-2022-40300
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com