CRITICAL🇵🇱 Wersja polska

CVE-2022-28219

CVSS 9.8v3.1pub. 2022-04-05upd. 2024-11-21

Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Zohocorp Manageengine Adaudit Plus

    APP
    Zohocorp
    7.0≤ 6.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEXXE
CWE
References

Related vulnerabilities

CVE-2022-47966CRITICAL9.8⚠ KEVPL ✓same product

RCE w wielu produktach Zoho ManageEngine przez podatną bibliotekę Apache Santuario xmlsec

CVE-2023-48792CRITICAL9.8PL ✓same product

SQL Injection w Zoho ManageEngine ADAudit Plus — eksport raportów

CVE-2023-48793CRITICAL9.8PL ✓same product

SQL Injection w Zoho ManageEngine ADAudit Plus — funkcja raportów agregowanych

CVE-2021-42847CRITICAL9.8PL ✓same product

RCE w Zoho ManageEngine ADAudit Plus — zapis i wykonanie dowolnych plików

CVE-2020-24786CRITICAL9.8PL ✓same product

Authentication bypass w wielu produktach Zoho ManageEngine