CVE-2022-43671: SQL Injection
Published Nov 12, 2022
·Updated
Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection.
Affected Software
16 affected components
ZohoCorp Manageengine Access Manager Plus<4.3
ZohoCorp Manageengine Access Manager Plus=4.3-build4300
ZohoCorp Manageengine Access Manager Plus=4.3-build4301
ZohoCorp Manageengine Access Manager Plus=4.3-build4302
ZohoCorp Manageengine Access Manager Plus=4.3-build4303
ZohoCorp Manageengine Access Manager Plus=4.3-build4304
ZohoCorp Manageengine Access Manager Plus=4.3-build4305
ZohoCorp ManageEngine PAM360<5.7
ZohoCorp ManageEngine PAM360=5.7-build5700
ZohoCorp ManageEngine PAM360=5.7-build5710
ZohoCorp ManageEngine Password Manager Pro<12.1
ZohoCorp ManageEngine Password Manager Pro=12.1-build12100
ZohoCorp ManageEngine Password Manager Pro=12.1-build12101
ZohoCorp ManageEngine Password Manager Pro=12.1-build12110
ZohoCorp ManageEngine Password Manager Pro=12.1-build12120
ZohoCorp ManageEngine Password Manager Pro=12.1-build12121
Event History
Nov 12, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2022-43671.
2
What is the severity of CVE-2022-43671?
The severity of CVE-2022-43671 is critical.
3
Which software versions are affected by CVE-2022-43671?
Zoho ManageEngine Password Manager Pro before 12.1.22, PAM360 before 5.7.11, and Access Manager Plus before 4.3.6 are affected by CVE-2022-43671.
4
How does CVE-2022-43671 allow SQL Injection?
CVE-2022-43671 allows SQL Injection through Zoho ManageEngine Password Manager Pro, PAM360, and Access Manager Plus.
5
Where can I find more information about CVE-2022-43671?
You can find more information about CVE-2022-43671 at this link: [CVE-2022-43671](https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-43671.html).