CVE-2022-28219

概要

参考情報

• cewolf.sourceforge.net/new/index.html · Product
• packetstormsecurity.com/files/167997/ManageEngine-ADAudit-Plus-Path-Traversal-XML-Injection.html · Exploit
• manageengine.com · Vendor Advisory
• horizon3.ai/red-team-blog-cve-2022-28219 · Exploit
• manageengine.com/products/active-directory-audit/cve-2022-28219.html · Patch

manageengine adaudit plus のその他の脆弱性

• CVE-2025-41444高 8.3Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.
• CVE-2025-36528高 8.3Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports…
• CVE-2025-27709高 8.3Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing rep…
• CVE-2025-41407高 8.3Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.
• CVE-2025-36527高 8.3Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.