The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection.
No PoCs from references.
- https://github.com/ARPSyndicate/cve-scores