zaproxy: False positive SQL injection alerts

ZAP issues a false positive SQL injection alert for the followng response (I have replaced some real values with ‘PRIVATE’ here due to security issues):

HTTP/1.1 200
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=PRIVATE; Path=/PRIVATE; HttpOnly
Cache-Control: no-cache
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 5792
Date: Tue, 17 Jul 2018 08:59:39 GMT

In the request body html, our application is printing an error -

head>
	<title>PRIVATE- Error Page</title>
	
<meta http-equiv="Content-Type" content="text/html"/>

and so on

Does ZAP expect some specific response code that is not 200 ?