{"id":"CVE-2022-28219","aliases":[],"url":"https://o3.security/vulnerability/CVE-2022-28219","summary":"Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.","details":"Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.","published":"2022-04-05T18:32:21.000Z","modified":"2024-08-03T05:48:37.498Z","cvss":null,"epss":{"score":0.97193,"percentile":0.99891,"asOf":"2026-09-05"},"cisaKev":null,"exploitsKnown":7,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://manageengine.com"},{"type":"WEB","url":"https://www.manageengine.com/products/active-directory-audit/cve-2022-28219.html"},{"type":"WEB","url":"https://www.horizon3.ai/red-team-blog-cve-2022-28219/"},{"type":"WEB","url":"http://cewolf.sourceforge.net/new/index.html"},{"type":"WEB","url":"http://packetstormsecurity.com/files/167997/ManageEngine-ADAudit-Plus-Path-Traversal-XML-Injection.html"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2024-08-03T05:48:37.498Z"}}