critical9.8
CVE-2022-28219
Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.
Impact
Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Adaudit Plus | through 6.0 Version 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://cewolf.sourceforge.net/new/index.html
- http://packetstormsecurity.com/files/167997/ManageEngine-ADAudit-Plus-Path-Traversal-XML-Injection.html
- https://manageengine.com
- https://www.horizon3.ai/red-team-blog-cve-2022-28219/
- https://www.manageengine.com/products/active-directory-audit/cve-2022-28219.html
- http://cewolf.sourceforge.net/new/index.html
- http://packetstormsecurity.com/files/167997/ManageEngine-ADAudit-Plus-Path-Traversal-XML-Injection.html
- https://manageengine.com
- https://www.horizon3.ai/red-team-blog-cve-2022-28219/
- https://www.manageengine.com/products/active-directory-audit/cve-2022-28219.html