SQL Injection Vulnerability in Zoho ManageEngine Access Manager Plus, Password Manager Pro, and PAM360

SQL Injection Vulnerability in Zoho ManageEngine Access Manager Plus, Password Manager Pro, and PAM360

CVE-2022-47523 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360 before 5801 are vulnerable to SQL Injection.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.