CVE-2022-40300

Published: Sep 16, 2022Modified: Nov 6, 2025

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection vulnerabilities.

Affected (315)

Products: Zohocorp: Manageengine Access Manager Plus, Manageengine Pam360, Manageengine Password Manager Pro

Zohocorp

3 products

Manageengine Access Manager Plus

Manageengine Pam360

Manageengine Password Manager Pro

Configuration A

315 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Access Manager Plus	Version 4.0 build4000
Zohocorp Manageengine Access Manager Plus	Version 4.1 build4100
Zohocorp Manageengine Access Manager Plus	Version 4.1 build4101
Zohocorp Manageengine Access Manager Plus	Version 4.2 build4200
Zohocorp Manageengine Access Manager Plus	Version 4.2 build4201
Zohocorp Manageengine Access Manager Plus	Version 4.2 build4202
Zohocorp Manageengine Access Manager Plus	Version 4.2 build4203
Zohocorp Manageengine Access Manager Plus	Version 4.3 build4300
Zohocorp Manageengine Access Manager Plus	Version 4.3 build4301
Zohocorp Manageengine Access Manager Plus	Version 4.3 build4302
Zohocorp Manageengine Access Manager Plus	Version 4.3 build4303
Zohocorp Manageengine Access Manager Plus	Version 4.3 build4304
Zohocorp Manageengine Pam360	Version 4.0
Zohocorp Manageengine Pam360	Version 4.0 build4001
Zohocorp Manageengine Pam360	Version 4.0 build4002
Zohocorp Manageengine Pam360	Version 4.1
Zohocorp Manageengine Pam360	Version 4.1 build4100
Zohocorp Manageengine Pam360	Version 4.1 build4101
Zohocorp Manageengine Pam360	Version 4.5
Zohocorp Manageengine Pam360	Version 4.5 build4500
Zohocorp Manageengine Pam360	Version 4.5 build4501
Zohocorp Manageengine Pam360	Version 5.0
Zohocorp Manageengine Pam360	Version 5.0 build5000
Zohocorp Manageengine Pam360	Version 5.0 build5001
Zohocorp Manageengine Pam360	Version 5.0 build5002
Zohocorp Manageengine Pam360	Version 5.0 build5003
Zohocorp Manageengine Pam360	Version 5.0 build5004
Zohocorp Manageengine Pam360	Version 5.1
Zohocorp Manageengine Pam360	Version 5.1 build5100
Zohocorp Manageengine Pam360	Version 5.2
Zohocorp Manageengine Pam360	Version 5.2 build5200
Zohocorp Manageengine Pam360	Version 5.3
Zohocorp Manageengine Pam360	Version 5.3 build5300
Zohocorp Manageengine Pam360	Version 5.3 build5301
Zohocorp Manageengine Pam360	Version 5.3 build5302
Zohocorp Manageengine Pam360	Version 5.3 build5303
Zohocorp Manageengine Pam360	Version 5.3 build5304
Zohocorp Manageengine Pam360	Version 5.3 build5305
Zohocorp Manageengine Pam360	Version 5.3 build5306
Zohocorp Manageengine Pam360	Version 5.4 build5400
Zohocorp Manageengine Pam360	Version 5.4 build5401
Zohocorp Manageengine Pam360	Version 5.5 build5500
Zohocorp Manageengine Pam360	Version 5.5 build5510
Zohocorp Manageengine Pam360	Version 5.5 build5520
Zohocorp Manageengine Pam360	Version 5.5 build5550
Zohocorp Manageengine Password Manager Pro	Version 10.0
Zohocorp Manageengine Password Manager Pro	Version 10.0 build10000
Zohocorp Manageengine Password Manager Pro	Version 10.0 build10000
Zohocorp Manageengine Password Manager Pro	Version 10.0 build10001
Zohocorp Manageengine Password Manager Pro	Version 10.0 build10001
Zohocorp Manageengine Password Manager Pro	Version 10.0 build10001
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10100
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10100
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10100
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10101
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10101
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10101
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10102
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10102
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10102
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10103
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10103
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10103
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10104
Zohocorp Manageengine Password Manager Pro	Version 10.2 build10200
Zohocorp Manageengine Password Manager Pro	Version 10.3 build10300
Zohocorp Manageengine Password Manager Pro	Version 10.3 build10301
Zohocorp Manageengine Password Manager Pro	Version 10.3 build10302
Zohocorp Manageengine Password Manager Pro	Version 10.4
Zohocorp Manageengine Password Manager Pro	Version 10.4
Zohocorp Manageengine Password Manager Pro	Version 10.4 build10400
Zohocorp Manageengine Password Manager Pro	Version 10.4 build10401
Zohocorp Manageengine Password Manager Pro	Version 10.4 build10402
Zohocorp Manageengine Password Manager Pro	Version 11.1
Zohocorp Manageengine Password Manager Pro	Version 11.1 11104
Zohocorp Manageengine Password Manager Pro	Version 11.1 build_11101
Zohocorp Manageengine Password Manager Pro	Version 11.1 build_11102
Zohocorp Manageengine Password Manager Pro	Version 11.1 build_11103
Zohocorp Manageengine Password Manager Pro	Version 11.2
Zohocorp Manageengine Password Manager Pro	Version 11.2 build11200
Zohocorp Manageengine Password Manager Pro	Version 11.2 build11201
Zohocorp Manageengine Password Manager Pro	Version 11.3 build11300
Zohocorp Manageengine Password Manager Pro	Version 11.3 build11301
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12000
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12001
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12002
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12003
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12004
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12005
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12006
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12007
Zohocorp Manageengine Password Manager Pro	Version 12.1 build12100
Zohocorp Manageengine Password Manager Pro	Version 12.1 build12101
Zohocorp Manageengine Password Manager Pro	Version 12.1 build12110
Zohocorp Manageengine Password Manager Pro	Version 12.1 build12120
Zohocorp Manageengine Password Manager Pro	Version 4.6 build4600
Zohocorp Manageengine Password Manager Pro	Version 4.6 build4600
Zohocorp Manageengine Password Manager Pro	Version 4.7 build4700
Zohocorp Manageengine Password Manager Pro	Version 4.7 build4700
Zohocorp Manageengine Password Manager Pro	Version 4.8 build4803
Zohocorp Manageengine Password Manager Pro	Version 4.8 build4803
Zohocorp Manageengine Password Manager Pro	Version 5.0
Zohocorp Manageengine Password Manager Pro	Version 5.0
Zohocorp Manageengine Password Manager Pro	Version 5.1
Zohocorp Manageengine Password Manager Pro	Version 5.1
Zohocorp Manageengine Password Manager Pro	Version 5.2
Zohocorp Manageengine Password Manager Pro	Version 5.2
Zohocorp Manageengine Password Manager Pro	Version 5.3
Zohocorp Manageengine Password Manager Pro	Version 5.3
Zohocorp Manageengine Password Manager Pro	Version 5.4
Zohocorp Manageengine Password Manager Pro	Version 5.4
Zohocorp Manageengine Password Manager Pro	Version 6.0
Zohocorp Manageengine Password Manager Pro	Version 6.0
Zohocorp Manageengine Password Manager Pro	Version 6.0 build6002
Zohocorp Manageengine Password Manager Pro	Version 6.0 build6002
Zohocorp Manageengine Password Manager Pro	Version 6.1
Zohocorp Manageengine Password Manager Pro	Version 6.1 build6104
Zohocorp Manageengine Password Manager Pro	Version 6.1 build6104
Zohocorp Manageengine Password Manager Pro	Version 6.2
Zohocorp Manageengine Password Manager Pro	Version 6.2
Zohocorp Manageengine Password Manager Pro	Version 6.2 build6201
Zohocorp Manageengine Password Manager Pro	Version 6.2 build6201
Zohocorp Manageengine Password Manager Pro	Version 6.3
Zohocorp Manageengine Password Manager Pro	Version 6.3
Zohocorp Manageengine Password Manager Pro	Version 6.4
Zohocorp Manageengine Password Manager Pro	Version 6.4
Zohocorp Manageengine Password Manager Pro	Version 6.4 build6401
Zohocorp Manageengine Password Manager Pro	Version 6.4 build6401
Zohocorp Manageengine Password Manager Pro	Version 6.4 build6402
Zohocorp Manageengine Password Manager Pro	Version 6.4 build6402
Zohocorp Manageengine Password Manager Pro	Version 6.4 build6403
Zohocorp Manageengine Password Manager Pro	Version 6.4 build6403
Zohocorp Manageengine Password Manager Pro	Version 6.4 build6404
Zohocorp Manageengine Password Manager Pro	Version 6.4 build6404
Zohocorp Manageengine Password Manager Pro	Version 6.5
Zohocorp Manageengine Password Manager Pro	Version 6.5
Zohocorp Manageengine Password Manager Pro	Version 6.5 build6503
Zohocorp Manageengine Password Manager Pro	Version 6.5 build6503
Zohocorp Manageengine Password Manager Pro	Version 6.5 build6504
Zohocorp Manageengine Password Manager Pro	Version 6.5 build6504
Zohocorp Manageengine Password Manager Pro	Version 6.5 build6505
Zohocorp Manageengine Password Manager Pro	Version 6.5 build6505
Zohocorp Manageengine Password Manager Pro	Version 6.6 build6600
Zohocorp Manageengine Password Manager Pro	Version 6.6 build6600
Zohocorp Manageengine Password Manager Pro	Version 6.7 build6700
Zohocorp Manageengine Password Manager Pro	Version 6.7 build6700
Zohocorp Manageengine Password Manager Pro	Version 6.7 build6701
Zohocorp Manageengine Password Manager Pro	Version 6.7 build6701
Zohocorp Manageengine Password Manager Pro	Version 6.8 build6800
Zohocorp Manageengine Password Manager Pro	Version 6.8 build6800
Zohocorp Manageengine Password Manager Pro	Version 6.8 build6801
Zohocorp Manageengine Password Manager Pro	Version 6.8 build6801
Zohocorp Manageengine Password Manager Pro	Version 6.8 build6802
Zohocorp Manageengine Password Manager Pro	Version 6.8 build6802
Zohocorp Manageengine Password Manager Pro	Version 6.8 build6803
Zohocorp Manageengine Password Manager Pro	Version 6.8 build6803
Zohocorp Manageengine Password Manager Pro	Version 6.9
Zohocorp Manageengine Password Manager Pro	Version 6.9
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6900
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6900
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6901
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6901
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6902
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6902
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6903
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6903
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6904
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6904
Zohocorp Manageengine Password Manager Pro	Version 7.0
Zohocorp Manageengine Password Manager Pro	Version 7.0
Zohocorp Manageengine Password Manager Pro	Version 7.0 build7000
Zohocorp Manageengine Password Manager Pro	Version 7.0 build7000
Zohocorp Manageengine Password Manager Pro	Version 7.0 build7001
Zohocorp Manageengine Password Manager Pro	Version 7.0 build7001
Zohocorp Manageengine Password Manager Pro	Version 7.0 build7002
Zohocorp Manageengine Password Manager Pro	Version 7.0 build7002
Zohocorp Manageengine Password Manager Pro	Version 7.0 build7003
Zohocorp Manageengine Password Manager Pro	Version 7.0 build7003
Zohocorp Manageengine Password Manager Pro	Version 7.1
Zohocorp Manageengine Password Manager Pro	Version 7.1
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7100
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7100
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7101
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7101
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7102
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7102
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7103
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7103
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7104
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7104
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7105
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7105
Zohocorp Manageengine Password Manager Pro	Version 7.5 build7500
Zohocorp Manageengine Password Manager Pro	Version 7.5 build7500
Zohocorp Manageengine Password Manager Pro	Version 7.5 build7501
Zohocorp Manageengine Password Manager Pro	Version 7.5 build7501
Zohocorp Manageengine Password Manager Pro	Version 7.6 build7600
Zohocorp Manageengine Password Manager Pro	Version 7.6 build7600
Zohocorp Manageengine Password Manager Pro	Version 8.0 build8000
Zohocorp Manageengine Password Manager Pro	Version 8.0 build8000
Zohocorp Manageengine Password Manager Pro	Version 8.0 build8001
Zohocorp Manageengine Password Manager Pro	Version 8.0 build8001
Zohocorp Manageengine Password Manager Pro	Version 8.1 build8100
Zohocorp Manageengine Password Manager Pro	Version 8.1 build8100
Zohocorp Manageengine Password Manager Pro	Version 8.1 build8101
Zohocorp Manageengine Password Manager Pro	Version 8.1 build8101
Zohocorp Manageengine Password Manager Pro	Version 8.1 build8102
Zohocorp Manageengine Password Manager Pro	Version 8.1 build8102
Zohocorp Manageengine Password Manager Pro	Version 8.2 build8200
Zohocorp Manageengine Password Manager Pro	Version 8.2 build8200
Zohocorp Manageengine Password Manager Pro	Version 8.3 build8300
Zohocorp Manageengine Password Manager Pro	Version 8.3 build8300
Zohocorp Manageengine Password Manager Pro	Version 8.3 build8301
Zohocorp Manageengine Password Manager Pro	Version 8.3 build8301
Zohocorp Manageengine Password Manager Pro	Version 8.3 build8302
Zohocorp Manageengine Password Manager Pro	Version 8.3 build8302
Zohocorp Manageengine Password Manager Pro	Version 8.3 build8303
Zohocorp Manageengine Password Manager Pro	Version 8.3 build8303
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8041
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8041
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8400
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8400
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8402
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8402
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8403
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8403
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8404
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8404
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8500
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8500
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8501
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8501
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8502
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8502
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8503
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8503
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8504
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8504
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8505
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8505
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8600
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8600
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8601
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8601
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8602
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8602
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8603
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8603
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8604
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8604
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8700
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8700
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8701
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8701
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8702
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8702
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8703
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8703
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8704
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8704
Zohocorp Manageengine Password Manager Pro	Version 9.0
Zohocorp Manageengine Password Manager Pro	Version 9.0 build9000
Zohocorp Manageengine Password Manager Pro	Version 9.0 build9000
Zohocorp Manageengine Password Manager Pro	Version 9.0 build9001
Zohocorp Manageengine Password Manager Pro	Version 9.0 build9001
Zohocorp Manageengine Password Manager Pro	Version 9.0 build9002
Zohocorp Manageengine Password Manager Pro	Version 9.0 build9002
Zohocorp Manageengine Password Manager Pro	Version 9.0 build9003
Zohocorp Manageengine Password Manager Pro	Version 9.0 build9003
Zohocorp Manageengine Password Manager Pro	Version 9.1
Zohocorp Manageengine Password Manager Pro	Version 9.1 build9100
Zohocorp Manageengine Password Manager Pro	Version 9.1 build9100
Zohocorp Manageengine Password Manager Pro	Version 9.1 build9101
Zohocorp Manageengine Password Manager Pro	Version 9.1 build9101
Zohocorp Manageengine Password Manager Pro	Version 9.2
Zohocorp Manageengine Password Manager Pro	Version 9.2 build9200
Zohocorp Manageengine Password Manager Pro	Version 9.2 build9200
Zohocorp Manageengine Password Manager Pro	Version 9.3
Zohocorp Manageengine Password Manager Pro	Version 9.3 build9300
Zohocorp Manageengine Password Manager Pro	Version 9.3 build9300
Zohocorp Manageengine Password Manager Pro	Version 9.4 build9400
Zohocorp Manageengine Password Manager Pro	Version 9.4 build9400
Zohocorp Manageengine Password Manager Pro	Version 9.4 build9401
Zohocorp Manageengine Password Manager Pro	Version 9.4 build9401
Zohocorp Manageengine Password Manager Pro	Version 9.4 build9402
Zohocorp Manageengine Password Manager Pro	Version 9.4 build9402
Zohocorp Manageengine Password Manager Pro	Version 9.5 build9500
Zohocorp Manageengine Password Manager Pro	Version 9.5 build9500
Zohocorp Manageengine Password Manager Pro	Version 9.5 build9501
Zohocorp Manageengine Password Manager Pro	Version 9.5 build9501
Zohocorp Manageengine Password Manager Pro	Version 9.5 build9502
Zohocorp Manageengine Password Manager Pro	Version 9.5 build9502
Zohocorp Manageengine Password Manager Pro	Version 9.6 build9600
Zohocorp Manageengine Password Manager Pro	Version 9.6 build9600
Zohocorp Manageengine Password Manager Pro	Version 9.6 build9601
Zohocorp Manageengine Password Manager Pro	Version 9.6 build9601
Zohocorp Manageengine Password Manager Pro	Version 9.7 build9700
Zohocorp Manageengine Password Manager Pro	Version 9.7 build9700
Zohocorp Manageengine Password Manager Pro	Version 9.7 build9701
Zohocorp Manageengine Password Manager Pro	Version 9.7 build9701
Zohocorp Manageengine Password Manager Pro	Version 9.7 build9702
Zohocorp Manageengine Password Manager Pro	Version 9.7 build9702
Zohocorp Manageengine Password Manager Pro	Version 9.8 build9800
Zohocorp Manageengine Password Manager Pro	Version 9.8 build9800
Zohocorp Manageengine Password Manager Pro	Version 9.8 build9801
Zohocorp Manageengine Password Manager Pro	Version 9.8 build9801
Zohocorp Manageengine Password Manager Pro	Version 9.8 build9802
Zohocorp Manageengine Password Manager Pro	Version 9.8 build9802
Zohocorp Manageengine Password Manager Pro	Version 9.8 build9803
Zohocorp Manageengine Password Manager Pro	Version 9.8 build9803
Zohocorp Manageengine Password Manager Pro	Version 9.9
Zohocorp Manageengine Password Manager Pro	Version 9.9 build9900
Zohocorp Manageengine Password Manager Pro	Version 9.9 build9900
Zohocorp Manageengine Password Manager Pro	Version 9.9 build9901
Zohocorp Manageengine Password Manager Pro	Version 9.9 build9901

Related CWEs

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

References (2)

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-40300.html

Source: cve@mitre.org

PatchVendor Advisory

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-40300.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.