CVE-2022-43672

Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a different software component relative to CVE-2022-43671.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-11-12

Last modified

2025-05-01

Weaknesses

CWE-89

Affected products

• Manageengine Access Manager Plus (Zohocorp)
• Manageengine Pam360 (Zohocorp)
• Manageengine Password Manager Pro (Zohocorp)

References

• https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-43672.html