Zoho Vulnerabilities and Affected Products
Vulnerabilities associated with manageengine_adaudit_plus.
Products
Clear product- ManageEngine6 vulnerabilities
- manageengine_opmanager3 vulnerabilities
- ManageEngine ServiceDesk2 vulnerabilities
- campaigns1 vulnerability
- Desktop Central1 vulnerability
- firewall_analyzer1 vulnerability
- ManageEngine ServiceDesk Plus (SDP)1 vulnerability
- ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus1 vulnerability
- manageengine_access_manager_plus1 vulnerability
- manageengine_adaudit_plus1 vulnerability
- manageengine_admanager_plus1 vulnerability
- manageengine_adselfservice_plus1 vulnerability
- manageengine_firewall_analyzer1 vulnerability
- Password Manager Pro (PMP)1 vulnerability
- Zoho CRM Lead Magnet1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-28219CRITICAL | Zoho manageengine_adaudit_plus Improper Restriction of XML External Entity ReferenceCewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution. | CVSS9.8v3.1 | EPSS97.2% | PoCs4 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |