CVE-2022-40300: SQL Injection

Published Sep 16, 2022
·
Updated

Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection vulnerabilities.

Affected Software

317 affected components
ZohoCorp Manageengine Access Manager Plus=4.0-build4000
ZohoCorp Manageengine Access Manager Plus=4.1-build4100
ZohoCorp Manageengine Access Manager Plus=4.1-build4101
ZohoCorp Manageengine Access Manager Plus=4.2-build4200
ZohoCorp Manageengine Access Manager Plus=4.2-build4201
ZohoCorp Manageengine Access Manager Plus=4.2-build4202
ZohoCorp Manageengine Access Manager Plus=4.2-build4203
ZohoCorp Manageengine Access Manager Plus=4.3-build4300
ZohoCorp Manageengine Access Manager Plus=4.3-build4301
ZohoCorp Manageengine Access Manager Plus=4.3-build4302
ZohoCorp Manageengine Access Manager Plus=4.3-build4303
ZohoCorp Manageengine Access Manager Plus=4.3-build4304
ZohoCorp ManageEngine PAM360=4.0
ZohoCorp ManageEngine PAM360=4.0-build4001
ZohoCorp ManageEngine PAM360=4.0-build4002
ZohoCorp ManageEngine PAM360=4.1
ZohoCorp ManageEngine PAM360=4.1-build4100
ZohoCorp ManageEngine PAM360=4.1-build4101
ZohoCorp ManageEngine PAM360=4.5
ZohoCorp ManageEngine PAM360=4.5-build4500
ZohoCorp ManageEngine PAM360=4.5-build4501
ZohoCorp ManageEngine PAM360=5.0
ZohoCorp ManageEngine PAM360=5.0-build5000
ZohoCorp ManageEngine PAM360=5.0-build5001
ZohoCorp ManageEngine PAM360=5.0-build5002
ZohoCorp ManageEngine PAM360=5.0-build5003
ZohoCorp ManageEngine PAM360=5.0-build5004
ZohoCorp ManageEngine PAM360=5.1
ZohoCorp ManageEngine PAM360=5.1-build5100
ZohoCorp ManageEngine PAM360=5.2
ZohoCorp ManageEngine PAM360=5.2-build5200
ZohoCorp ManageEngine PAM360=5.3
ZohoCorp ManageEngine PAM360=5.3-build5300
ZohoCorp ManageEngine PAM360=5.3-build5301
ZohoCorp ManageEngine PAM360=5.3-build5302
ZohoCorp ManageEngine PAM360=5.3-build5303
ZohoCorp ManageEngine PAM360=5.3-build5304
ZohoCorp ManageEngine PAM360=5.3-build5305
ZohoCorp ManageEngine PAM360=5.3-build5306
ZohoCorp ManageEngine PAM360=5.4-build5400
ZohoCorp ManageEngine PAM360=5.4-build5401
ZohoCorp ManageEngine PAM360=5.5-build5500
ZohoCorp ManageEngine PAM360=5.5-build5510
ZohoCorp ManageEngine PAM360=5.5-build5520
ZohoCorp ManageEngine PAM360=5.5-build5550
ZohoCorp ManageEngine Password Manager Pro=4.6-build4600
ZohoCorp ManageEngine Password Manager Pro=4.6-build4600
ZohoCorp ManageEngine Password Manager Pro=4.7-build4700
ZohoCorp ManageEngine Password Manager Pro=4.7-build4700
ZohoCorp ManageEngine Password Manager Pro=4.8-build4803
ZohoCorp ManageEngine Password Manager Pro=4.8-build4803
ZohoCorp ManageEngine Password Manager Pro=5.0
ZohoCorp ManageEngine Password Manager Pro=5.0
ZohoCorp ManageEngine Password Manager Pro=5.1
ZohoCorp ManageEngine Password Manager Pro=5.1
ZohoCorp ManageEngine Password Manager Pro=5.2
ZohoCorp ManageEngine Password Manager Pro=5.2
ZohoCorp ManageEngine Password Manager Pro=5.3
ZohoCorp ManageEngine Password Manager Pro=5.3
ZohoCorp ManageEngine Password Manager Pro=5.4
ZohoCorp ManageEngine Password Manager Pro=5.4
ZohoCorp ManageEngine Password Manager Pro=6.0
ZohoCorp ManageEngine Password Manager Pro=6.0
ZohoCorp ManageEngine Password Manager Pro=6.0-build6002
ZohoCorp ManageEngine Password Manager Pro=6.0-build6002
ZohoCorp ManageEngine Password Manager Pro=6.1
ZohoCorp ManageEngine Password Manager Pro=6.1-build6104
ZohoCorp ManageEngine Password Manager Pro=6.1-build6104
ZohoCorp ManageEngine Password Manager Pro=6.2
ZohoCorp ManageEngine Password Manager Pro=6.2
ZohoCorp ManageEngine Password Manager Pro=6.2-build6201
ZohoCorp ManageEngine Password Manager Pro=6.2-build6201
ZohoCorp ManageEngine Password Manager Pro=6.3
ZohoCorp ManageEngine Password Manager Pro=6.3
ZohoCorp ManageEngine Password Manager Pro=6.4
ZohoCorp ManageEngine Password Manager Pro=6.4
ZohoCorp ManageEngine Password Manager Pro=6.4-build6401
ZohoCorp ManageEngine Password Manager Pro=6.4-build6401
ZohoCorp ManageEngine Password Manager Pro=6.4-build6402
ZohoCorp ManageEngine Password Manager Pro=6.4-build6402
ZohoCorp ManageEngine Password Manager Pro=6.4-build6403
ZohoCorp ManageEngine Password Manager Pro=6.4-build6403
ZohoCorp ManageEngine Password Manager Pro=6.4-build6404
ZohoCorp ManageEngine Password Manager Pro=6.4-build6404
ZohoCorp ManageEngine Password Manager Pro=6.5
ZohoCorp ManageEngine Password Manager Pro=6.5
ZohoCorp ManageEngine Password Manager Pro=6.5-build6503
ZohoCorp ManageEngine Password Manager Pro=6.5-build6503
ZohoCorp ManageEngine Password Manager Pro=6.5-build6504
ZohoCorp ManageEngine Password Manager Pro=6.5-build6504
ZohoCorp ManageEngine Password Manager Pro=6.5-build6505
ZohoCorp ManageEngine Password Manager Pro=6.5-build6505
ZohoCorp ManageEngine Password Manager Pro=6.6-build6600
ZohoCorp ManageEngine Password Manager Pro=6.6-build6600
ZohoCorp ManageEngine Password Manager Pro=6.7-build6700
ZohoCorp ManageEngine Password Manager Pro=6.7-build6700
ZohoCorp ManageEngine Password Manager Pro=6.7-build6701
ZohoCorp ManageEngine Password Manager Pro=6.7-build6701
ZohoCorp ManageEngine Password Manager Pro=6.8-build6800
ZohoCorp ManageEngine Password Manager Pro=6.8-build6800
ZohoCorp ManageEngine Password Manager Pro=6.8-build6801
ZohoCorp ManageEngine Password Manager Pro=6.8-build6801
ZohoCorp ManageEngine Password Manager Pro=6.8-build6802
ZohoCorp ManageEngine Password Manager Pro=6.8-build6802
ZohoCorp ManageEngine Password Manager Pro=6.8-build6803
ZohoCorp ManageEngine Password Manager Pro=6.8-build6803
ZohoCorp ManageEngine Password Manager Pro=6.9
ZohoCorp ManageEngine Password Manager Pro=6.9
ZohoCorp ManageEngine Password Manager Pro=6.9-build6900
ZohoCorp ManageEngine Password Manager Pro=6.9-build6900
ZohoCorp ManageEngine Password Manager Pro=6.9-build6901
ZohoCorp ManageEngine Password Manager Pro=6.9-build6901
ZohoCorp ManageEngine Password Manager Pro=6.9-build6902
ZohoCorp ManageEngine Password Manager Pro=6.9-build6902
ZohoCorp ManageEngine Password Manager Pro=6.9-build6903
ZohoCorp ManageEngine Password Manager Pro=6.9-build6903
ZohoCorp ManageEngine Password Manager Pro=6.9-build6904
ZohoCorp ManageEngine Password Manager Pro=6.9-build6904
ZohoCorp ManageEngine Password Manager Pro=7.0
ZohoCorp ManageEngine Password Manager Pro=7.0
ZohoCorp ManageEngine Password Manager Pro=7.0-build7000
ZohoCorp ManageEngine Password Manager Pro=7.0-build7000
ZohoCorp ManageEngine Password Manager Pro=7.0-build7001
ZohoCorp ManageEngine Password Manager Pro=7.0-build7001
ZohoCorp ManageEngine Password Manager Pro=7.0-build7002
ZohoCorp ManageEngine Password Manager Pro=7.0-build7002
ZohoCorp ManageEngine Password Manager Pro=7.0-build7003
ZohoCorp ManageEngine Password Manager Pro=7.0-build7003
ZohoCorp ManageEngine Password Manager Pro=7.1
ZohoCorp ManageEngine Password Manager Pro=7.1
ZohoCorp ManageEngine Password Manager Pro=7.1-build7100
ZohoCorp ManageEngine Password Manager Pro=7.1-build7100
ZohoCorp ManageEngine Password Manager Pro=7.1-build7101
ZohoCorp ManageEngine Password Manager Pro=7.1-build7101
ZohoCorp ManageEngine Password Manager Pro=7.1-build7102
ZohoCorp ManageEngine Password Manager Pro=7.1-build7102
ZohoCorp ManageEngine Password Manager Pro=7.1-build7103
ZohoCorp ManageEngine Password Manager Pro=7.1-build7103
ZohoCorp ManageEngine Password Manager Pro=7.1-build7104
ZohoCorp ManageEngine Password Manager Pro=7.1-build7104
ZohoCorp ManageEngine Password Manager Pro=7.1-build7105
ZohoCorp ManageEngine Password Manager Pro=7.1-build7105
ZohoCorp ManageEngine Password Manager Pro=7.5-build7500
ZohoCorp ManageEngine Password Manager Pro=7.5-build7500
ZohoCorp ManageEngine Password Manager Pro=7.5-build7501
ZohoCorp ManageEngine Password Manager Pro=7.5-build7501
ZohoCorp ManageEngine Password Manager Pro=7.6-build7600
ZohoCorp ManageEngine Password Manager Pro=7.6-build7600
ZohoCorp ManageEngine Password Manager Pro=8.0-build8000
ZohoCorp ManageEngine Password Manager Pro=8.0-build8000
ZohoCorp ManageEngine Password Manager Pro=8.0-build8001
ZohoCorp ManageEngine Password Manager Pro=8.0-build8001
ZohoCorp ManageEngine Password Manager Pro=8.1-build8100
ZohoCorp ManageEngine Password Manager Pro=8.1-build8100
ZohoCorp ManageEngine Password Manager Pro=8.1-build8101
ZohoCorp ManageEngine Password Manager Pro=8.1-build8101
ZohoCorp ManageEngine Password Manager Pro=8.1-build8102
ZohoCorp ManageEngine Password Manager Pro=8.1-build8102
ZohoCorp ManageEngine Password Manager Pro=8.2-build8200
ZohoCorp ManageEngine Password Manager Pro=8.2-build8200
ZohoCorp ManageEngine Password Manager Pro=8.3-build8300
ZohoCorp ManageEngine Password Manager Pro=8.3-build8300
ZohoCorp ManageEngine Password Manager Pro=8.3-build8301
ZohoCorp ManageEngine Password Manager Pro=8.3-build8301
ZohoCorp ManageEngine Password Manager Pro=8.3-build8302
ZohoCorp ManageEngine Password Manager Pro=8.3-build8302
ZohoCorp ManageEngine Password Manager Pro=8.3-build8303
ZohoCorp ManageEngine Password Manager Pro=8.3-build8303
ZohoCorp ManageEngine Password Manager Pro=8.4-build8041
ZohoCorp ManageEngine Password Manager Pro=8.4-build8041
ZohoCorp ManageEngine Password Manager Pro=8.4-build8400
ZohoCorp ManageEngine Password Manager Pro=8.4-build8400
ZohoCorp ManageEngine Password Manager Pro=8.4-build8402
ZohoCorp ManageEngine Password Manager Pro=8.4-build8402
ZohoCorp ManageEngine Password Manager Pro=8.4-build8403
ZohoCorp ManageEngine Password Manager Pro=8.4-build8403
ZohoCorp ManageEngine Password Manager Pro=8.4-build8404
ZohoCorp ManageEngine Password Manager Pro=8.4-build8404
ZohoCorp ManageEngine Password Manager Pro=8.5-build8500
ZohoCorp ManageEngine Password Manager Pro=8.5-build8500
ZohoCorp ManageEngine Password Manager Pro=8.5-build8501
ZohoCorp ManageEngine Password Manager Pro=8.5-build8501
ZohoCorp ManageEngine Password Manager Pro=8.5-build8502
ZohoCorp ManageEngine Password Manager Pro=8.5-build8502
ZohoCorp ManageEngine Password Manager Pro=8.5-build8503
ZohoCorp ManageEngine Password Manager Pro=8.5-build8503
ZohoCorp ManageEngine Password Manager Pro=8.5-build8504
ZohoCorp ManageEngine Password Manager Pro=8.5-build8504
ZohoCorp ManageEngine Password Manager Pro=8.5-build8505
ZohoCorp ManageEngine Password Manager Pro=8.5-build8505
ZohoCorp ManageEngine Password Manager Pro=8.6-build8600
ZohoCorp ManageEngine Password Manager Pro=8.6-build8600
ZohoCorp ManageEngine Password Manager Pro=8.6-build8601
ZohoCorp ManageEngine Password Manager Pro=8.6-build8601
ZohoCorp ManageEngine Password Manager Pro=8.6-build8602
ZohoCorp ManageEngine Password Manager Pro=8.6-build8602
ZohoCorp ManageEngine Password Manager Pro=8.6-build8603
ZohoCorp ManageEngine Password Manager Pro=8.6-build8603
ZohoCorp ManageEngine Password Manager Pro=8.6-build8604
ZohoCorp ManageEngine Password Manager Pro=8.6-build8604
ZohoCorp ManageEngine Password Manager Pro=8.7-build8700
ZohoCorp ManageEngine Password Manager Pro=8.7-build8700
ZohoCorp ManageEngine Password Manager Pro=8.7-build8701
ZohoCorp ManageEngine Password Manager Pro=8.7-build8701
ZohoCorp ManageEngine Password Manager Pro=8.7-build8702
ZohoCorp ManageEngine Password Manager Pro=8.7-build8702
ZohoCorp ManageEngine Password Manager Pro=8.7-build8703
ZohoCorp ManageEngine Password Manager Pro=8.7-build8703
ZohoCorp ManageEngine Password Manager Pro=8.7-build8704
ZohoCorp ManageEngine Password Manager Pro=8.7-build8704
ZohoCorp ManageEngine Password Manager Pro=9.0
ZohoCorp ManageEngine Password Manager Pro=9.0-build9000
ZohoCorp ManageEngine Password Manager Pro=9.0-build9000
ZohoCorp ManageEngine Password Manager Pro=9.0-build9001
ZohoCorp ManageEngine Password Manager Pro=9.0-build9001
ZohoCorp ManageEngine Password Manager Pro=9.0-build9002
ZohoCorp ManageEngine Password Manager Pro=9.0-build9002
ZohoCorp ManageEngine Password Manager Pro=9.0-build9003
ZohoCorp ManageEngine Password Manager Pro=9.0-build9003
ZohoCorp ManageEngine Password Manager Pro=9.1
ZohoCorp ManageEngine Password Manager Pro=9.1-build9100
ZohoCorp ManageEngine Password Manager Pro=9.1-build9100
ZohoCorp ManageEngine Password Manager Pro=9.1-build9101
ZohoCorp ManageEngine Password Manager Pro=9.1-build9101
ZohoCorp ManageEngine Password Manager Pro=9.2
ZohoCorp ManageEngine Password Manager Pro=9.2-build9200
ZohoCorp ManageEngine Password Manager Pro=9.2-build9200
ZohoCorp ManageEngine Password Manager Pro=9.3
ZohoCorp ManageEngine Password Manager Pro=9.3-build9300
ZohoCorp ManageEngine Password Manager Pro=9.3-build9300
ZohoCorp ManageEngine Password Manager Pro=9.4-build9400
ZohoCorp ManageEngine Password Manager Pro=9.4-build9400
ZohoCorp ManageEngine Password Manager Pro=9.4-build9401
ZohoCorp ManageEngine Password Manager Pro=9.4-build9401
ZohoCorp ManageEngine Password Manager Pro=9.4-build9402
ZohoCorp ManageEngine Password Manager Pro=9.4-build9402
ZohoCorp ManageEngine Password Manager Pro=9.5-build9500
ZohoCorp ManageEngine Password Manager Pro=9.5-build9500
ZohoCorp ManageEngine Password Manager Pro=9.5-build9501
ZohoCorp ManageEngine Password Manager Pro=9.5-build9501
ZohoCorp ManageEngine Password Manager Pro=9.5-build9502
ZohoCorp ManageEngine Password Manager Pro=9.5-build9502
ZohoCorp ManageEngine Password Manager Pro=9.6-build9600
ZohoCorp ManageEngine Password Manager Pro=9.6-build9600
ZohoCorp ManageEngine Password Manager Pro=9.6-build9601
ZohoCorp ManageEngine Password Manager Pro=9.6-build9601
ZohoCorp ManageEngine Password Manager Pro=9.7-build9700
ZohoCorp ManageEngine Password Manager Pro=9.7-build9700
ZohoCorp ManageEngine Password Manager Pro=9.7-build9701
ZohoCorp ManageEngine Password Manager Pro=9.7-build9701
ZohoCorp ManageEngine Password Manager Pro=9.7-build9702
ZohoCorp ManageEngine Password Manager Pro=9.7-build9702
ZohoCorp ManageEngine Password Manager Pro=9.8-build9800
ZohoCorp ManageEngine Password Manager Pro=9.8-build9800
ZohoCorp ManageEngine Password Manager Pro=9.8-build9801
ZohoCorp ManageEngine Password Manager Pro=9.8-build9801
ZohoCorp ManageEngine Password Manager Pro=9.8-build9802
ZohoCorp ManageEngine Password Manager Pro=9.8-build9802
ZohoCorp ManageEngine Password Manager Pro=9.8-build9803
ZohoCorp ManageEngine Password Manager Pro=9.8-build9803
ZohoCorp ManageEngine Password Manager Pro=9.9
ZohoCorp ManageEngine Password Manager Pro=9.9-build9900
ZohoCorp ManageEngine Password Manager Pro=9.9-build9900
ZohoCorp ManageEngine Password Manager Pro=9.9-build9901
ZohoCorp ManageEngine Password Manager Pro=9.9-build9901
ZohoCorp ManageEngine Password Manager Pro=10.0
ZohoCorp ManageEngine Password Manager Pro=10.0-build10000
ZohoCorp ManageEngine Password Manager Pro=10.0-build10000
ZohoCorp ManageEngine Password Manager Pro=10.0-build10001
ZohoCorp ManageEngine Password Manager Pro=10.0-build10001
ZohoCorp ManageEngine Password Manager Pro=10.0-build10001
ZohoCorp ManageEngine Password Manager Pro=10.1-build10100
ZohoCorp ManageEngine Password Manager Pro=10.1-build10100
ZohoCorp ManageEngine Password Manager Pro=10.1-build10100
ZohoCorp ManageEngine Password Manager Pro=10.1-build10101
ZohoCorp ManageEngine Password Manager Pro=10.1-build10101
ZohoCorp ManageEngine Password Manager Pro=10.1-build10101
ZohoCorp ManageEngine Password Manager Pro=10.1-build10102
ZohoCorp ManageEngine Password Manager Pro=10.1-build10102
ZohoCorp ManageEngine Password Manager Pro=10.1-build10102
ZohoCorp ManageEngine Password Manager Pro=10.1-build10103
ZohoCorp ManageEngine Password Manager Pro=10.1-build10103
ZohoCorp ManageEngine Password Manager Pro=10.1-build10103
ZohoCorp ManageEngine Password Manager Pro=10.1-build10104
ZohoCorp ManageEngine Password Manager Pro=10.2-build10200
ZohoCorp ManageEngine Password Manager Pro=10.3-build10300
ZohoCorp ManageEngine Password Manager Pro=10.3-build10301
ZohoCorp ManageEngine Password Manager Pro=10.3-build10302
ZohoCorp ManageEngine Password Manager Pro=10.4
ZohoCorp ManageEngine Password Manager Pro=10.4
ZohoCorp ManageEngine Password Manager Pro=10.4-build10400
ZohoCorp ManageEngine Password Manager Pro=10.4-build10401
ZohoCorp ManageEngine Password Manager Pro=10.4-build10402
ZohoCorp ManageEngine Password Manager Pro=11.1
ZohoCorp ManageEngine Password Manager Pro=11.1-11104
ZohoCorp ManageEngine Password Manager Pro=11.1-build_11101
ZohoCorp ManageEngine Password Manager Pro=11.1-build_11102
ZohoCorp ManageEngine Password Manager Pro=11.1-build_11103
ZohoCorp ManageEngine Password Manager Pro=11.2
ZohoCorp ManageEngine Password Manager Pro=11.2-11200
ZohoCorp ManageEngine Password Manager Pro=11.2-11201
ZohoCorp ManageEngine Password Manager Pro=11.3-build11300
ZohoCorp ManageEngine Password Manager Pro=11.3-build11301
ZohoCorp ManageEngine Password Manager Pro=12.0-build12000
ZohoCorp ManageEngine Password Manager Pro=12.0-build12001
ZohoCorp ManageEngine Password Manager Pro=12.0-build12002
ZohoCorp ManageEngine Password Manager Pro=12.0-build12003
ZohoCorp ManageEngine Password Manager Pro=12.0-build12004
ZohoCorp ManageEngine Password Manager Pro=12.0-build12005
ZohoCorp ManageEngine Password Manager Pro=12.0-build12006
ZohoCorp ManageEngine Password Manager Pro=12.0-build12007
ZohoCorp ManageEngine Password Manager Pro=12.1-build12100
ZohoCorp ManageEngine Password Manager Pro=12.1-build12101
ZohoCorp ManageEngine Password Manager Pro=12.1-build12110
ZohoCorp ManageEngine Password Manager Pro=12.1-build12120
ZohoCorp ManageEngine Password Manager Pro=11.2-build11200
ZohoCorp ManageEngine Password Manager Pro=11.2-build11201

Remediation

Patch Available

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-40300.html

Event History

Sep 16, 2022
CVE Published
via MITRE·10:47 PM
Data Sourced
via MITRE·10:47 PM
Description
Data Sourced
via NVD·11:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-40300?

The severity of CVE-2022-40300 is high due to its multiple SQL injection vulnerabilities that can be exploited by attackers.

2

How do I fix CVE-2022-40300?

To fix CVE-2022-40300, upgrade to versions 12121 or later for Zoho ManageEngine Password Manager Pro, PAM360, and Access Manager Plus.

3

What products are affected by CVE-2022-40300?

CVE-2022-40300 affects Zoho ManageEngine Password Manager Pro, PAM360, and Access Manager Plus prior to their respective fixed versions.

4

Is CVE-2022-40300 easy to exploit?

Yes, CVE-2022-40300 can be easily exploited due to the nature of SQL injection attacks, making it critical to address.

5

What are the potential impacts of CVE-2022-40300?

If exploited, CVE-2022-40300 can lead to unauthorized access to sensitive data and compromise the integrity of the database.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203