// For flags

CVE-2022-43672

 

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a different software component relative to CVE-2022-43671.

Zoho ManageEngine Password Manager Pro versiones anteriores a la 12122, PAM360 versiones anteriores a la 5711 y Access Manager Plus versiones anteriores a la 4306 permiten la inyección de SQL (en un componente de software diferente en relación con CVE-2022-43671.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-10-24 CVE Reserved
  • 2022-11-12 CVE Published
  • 2024-06-04 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Zohocorp
Search vendor "Zohocorp"
Manageengine Access Manager Plus
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus"
< 4.3
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus" and version " < 4.3"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Access Manager Plus
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus"
4.3
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus" and version "4.3"
build4300
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Access Manager Plus
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus"
4.3
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus" and version "4.3"
build4301
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Access Manager Plus
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus"
4.3
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus" and version "4.3"
build4302
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Access Manager Plus
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus"
4.3
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus" and version "4.3"
build4303
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Access Manager Plus
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus"
4.3
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus" and version "4.3"
build4304
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Access Manager Plus
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus"
4.3
Search vendor "Zohocorp" for product "Manageengine Access Manager Plus" and version "4.3"
build4305
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Pam360
Search vendor "Zohocorp" for product "Manageengine Pam360"
< 5.7
Search vendor "Zohocorp" for product "Manageengine Pam360" and version " < 5.7"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Pam360
Search vendor "Zohocorp" for product "Manageengine Pam360"
5.7
Search vendor "Zohocorp" for product "Manageengine Pam360" and version "5.7"
build5700
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Pam360
Search vendor "Zohocorp" for product "Manageengine Pam360"
5.7
Search vendor "Zohocorp" for product "Manageengine Pam360" and version "5.7"
build5710
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Password Manager Pro
Search vendor "Zohocorp" for product "Manageengine Password Manager Pro"
< 12.1
Search vendor "Zohocorp" for product "Manageengine Password Manager Pro" and version " < 12.1"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Password Manager Pro
Search vendor "Zohocorp" for product "Manageengine Password Manager Pro"
12.1
Search vendor "Zohocorp" for product "Manageengine Password Manager Pro" and version "12.1"
build12100
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Password Manager Pro
Search vendor "Zohocorp" for product "Manageengine Password Manager Pro"
12.1
Search vendor "Zohocorp" for product "Manageengine Password Manager Pro" and version "12.1"
build12101
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Password Manager Pro
Search vendor "Zohocorp" for product "Manageengine Password Manager Pro"
12.1
Search vendor "Zohocorp" for product "Manageengine Password Manager Pro" and version "12.1"
build12110
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Password Manager Pro
Search vendor "Zohocorp" for product "Manageengine Password Manager Pro"
12.1
Search vendor "Zohocorp" for product "Manageengine Password Manager Pro" and version "12.1"
build12120
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Password Manager Pro
Search vendor "Zohocorp" for product "Manageengine Password Manager Pro"
12.1
Search vendor "Zohocorp" for product "Manageengine Password Manager Pro" and version "12.1"
build12121
Affected