CVE-2022-42904

HIGH

ManageEngine ADManager Plus <= 7151 - Authenticated Command Injection via Proxy Settings

Title source: llm
STIX 2.1

Description

Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings.

References (1)

Core 1

Scores

CVSS v3 7.2
EPSS 0.7944
EPSS Percentile 99.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-77
Status published
Products (2)
zohocorp/manageengine_admanager_plus 7.1 (26 CPE variants)
zohocorp/manageengine_admanager_plus < 7.1
Published Nov 18, 2022
Tracked Since Feb 18, 2026