The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection.Referenceshttps://www.manageengine.com/products/firewall/release-notes.html