CVE-2022-40300

Published Sep 16, 2022 CVSS 3.1 · 9.8 Critical EPSS 99.1% KEV · Not listed
Description
Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection vulnerabilities.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics epss

{'score': 0.49427}

epss

{'score': 0.46103}

Type Values Removed Values Added
CPEs cpe:2.3:a:zohocorp:manageengine_password_manager_pro:11.2:11200:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:11.2:11201:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:11.2:build11200:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:11.2:build11201:*:*:*:*:*:*
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 3, 2024, 12:14 PM
Reserved
Sep 9, 2022, 12:00 AM
Status
Analyzed
Published
Sep 16, 2022, 11:15 PM
Modified
Jun 17, 2026, 5:01 AM