CVE-2022-47523: SQL Injection
First published: Thu Jan 05 2023(Updated: )
Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360 before 5801 are vulnerable to SQL Injection.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zohocorp Manageengine Password Manager Pro | <12.2 | |
| Zohocorp Manageengine Password Manager Pro | =12.2-build12200 | |
| Zohocorp ManageEngine PAM360 | <5.8 | |
| Zohocorp ManageEngine PAM360 | =5.8-build5800 | |
| Zohocorp Manageengine Access Manager Plus | <4.3 | |
| Zohocorp Manageengine Access Manager Plus | =4.3-build4300 | |
| Zohocorp Manageengine Access Manager Plus | =4.3-build4301 | |
| Zohocorp Manageengine Access Manager Plus | =4.3-build4302 | |
| Zohocorp Manageengine Access Manager Plus | =4.3-build4303 | |
| Zohocorp Manageengine Access Manager Plus | =4.3-build4304 | |
| Zohocorp Manageengine Access Manager Plus | =4.3-build4305 | |
| Zohocorp Manageengine Access Manager Plus | =4.3-build4306 | |
| Zohocorp Manageengine Access Manager Plus | =4.3-build4307 | |
| Zohocorp Manageengine Access Manager Plus | =4.3-build4308 | |
| <12.2 | ||
| =12.2-build12200 | ||
| <5.8 | ||
| =5.8-build5800 | ||
| <4.3 | ||
| =4.3-build4300 | ||
| =4.3-build4301 | ||
| =4.3-build4302 | ||
| =4.3-build4303 | ||
| =4.3-build4304 | ||
| =4.3-build4305 | ||
| =4.3-build4306 | ||
| =4.3-build4307 | ||
| =4.3-build4308 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-47523.
What is the severity of CVE-2022-47523?
The severity of CVE-2022-47523 is critical with a score of 9.8.
Which software products are affected by CVE-2022-47523?
Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360 before 5801 are affected by CVE-2022-47523.
What is the CWE category associated with CVE-2022-47523?
CVE-2022-47523 is associated with CWE category 89.
Where can I find more information about CVE-2022-47523?
You can find more information about CVE-2022-47523 at the following link: [https://www.manageengine.com/privileged-session-management/advisory/cve-2022-47523.html](https://www.manageengine.com/privileged-session-management/advisory/cve-2022-47523.html)
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/references
- agent/description
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/zohocorp
- canonical/zohocorp manageengine password manager pro
- version/zohocorp manageengine password manager pro/12.2-build12200
- canonical/zohocorp manageengine pam360
- version/zohocorp manageengine pam360/5.8-build5800
- canonical/zohocorp manageengine access manager plus
- version/zohocorp manageengine access manager plus/4.3-build4300
- version/zohocorp manageengine access manager plus/4.3-build4301
- version/zohocorp manageengine access manager plus/4.3-build4302
- version/zohocorp manageengine access manager plus/4.3-build4303
- version/zohocorp manageengine access manager plus/4.3-build4304
- version/zohocorp manageengine access manager plus/4.3-build4305
- version/zohocorp manageengine access manager plus/4.3-build4306
- version/zohocorp manageengine access manager plus/4.3-build4307
- version/zohocorp manageengine access manager plus/4.3-build4308