CVE-2022-28219

Mô tả

Tham khảo

• cewolf.sourceforge.net/new/index.html · Product
• packetstormsecurity.com/files/167997/ManageEngine-ADAudit-Plus-Path-Traversal-XML-Injection.html · Exploit
• manageengine.com · Vendor Advisory
• horizon3.ai/red-team-blog-cve-2022-28219 · Exploit
• manageengine.com/products/active-directory-audit/cve-2022-28219.html · Patch

Lỗ hổng khác của manageengine adaudit plus

• CVE-2025-41444CAO 8.3Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.
• CVE-2025-36528CAO 8.3Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports…
• CVE-2025-27709CAO 8.3Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing rep…
• CVE-2025-41407CAO 8.3Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.
• CVE-2025-36527CAO 8.3Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.