Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360 before 5801 are vulnerable to SQL Injection.
References
Link | Resource |
---|---|
https://www.manageengine.com/privileged-session-management/advisory/cve-2022-47523.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
11 Jan 2023, 18:01
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4306:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_pam360:*:*:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.2:build12200:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4303:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4300:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4301:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_access_manager_plus:*:*:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4302:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4304:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4307:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4308:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4305:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_pam360:5.8:build5800:*:*:*:*:*:* |
|
First Time |
Zohocorp manageengine Access Manager Plus
Zohocorp manageengine Password Manager Pro Zohocorp manageengine Pam360 Zohocorp |
|
References | (MISC) https://www.manageengine.com/privileged-session-management/advisory/cve-2022-47523.html - Patch, Vendor Advisory | |
CWE | CWE-89 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
05 Jan 2023, 08:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-01-05 08:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-47523
Mitre link : CVE-2022-47523
CVE.ORG link : CVE-2022-47523
JSON object : View
Products Affected
zohocorp
- manageengine_access_manager_plus
- manageengine_password_manager_pro
- manageengine_pam360
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')