CVE-2022-28219

🗓️ 05 Apr 2022 18:32:21Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 249 Views🌐 WEB

CWE-28219 in Zoho ManageEngine ADAudit Plus allows unauthenticated XXE attack for Remote Code Execution

Reporter	Title	Published	Views	Family All 23
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Zohocorp Manageengine_Adaudit_Plus	26 Jun 202215:48	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Zohocorp Manageengine_Adaudit_Plus	1 Jul 202222:40	–	githubexploit
zdt	ManageEngine ADAudit Plus Path Traversal / XML Injection Exploit	8 Aug 202200:00	–	zdt
ATTACKERKB	CVE-2022-28219	5 Apr 202219:15	–	attackerkb
BDU FSTEC	The vulnerability of the cewolf component of the Windows Active Directory (AD) management and reporting software Zoho ManageEngine ADAudit Plus allows attackers to perform XXE attacks.	6 Jul 202200:00	–	bdu_fstec
Circl	CVE-2022-28219	5 Apr 202222:29	–	circl
CNNVD	ZOHO ManageEngine ADAudit Plus 代码问题漏洞	5 Apr 202200:00	–	cnnvd
CNVD	Zoho ManageEngine ADAudit Plus Remote Code Execution Vulnerability	7 Apr 202200:00	–	cnvd
Check Point Advisories	Zoho ManageEngine ADAudit Plus Remote Code Execution (CVE-2022-28219)	4 Jul 202200:00	–	checkpoint_advisories
Cvelist	CVE-2022-28219	5 Apr 202218:32	–	cvelist

NVD

Node

Source	Link
cewolf	www.cewolf.sourceforge.net/new/index.html
manageengine	www.manageengine.com/
manageengine	www.manageengine.com/products/active-directory-audit/cve-2022-28219.html
packetstormsecurity	www.packetstormsecurity.com/files/167997/ManageEngine-ADAudit-Plus-Path-Traversal-XML-Injection.html
horizon3	www.horizon3.ai/red-team-blog-cve-2022-28219/

Parameter	Position	Path	Description	CWE
img	path	/cewolf/logo.png	Path traversal and unsafe deserialization in /cewolf endpoint leading to remote code execution	CWE-611
Task Content	request body	/api/agent/tabs/agentData	XXE vulnerability via XML payload in request body to the /api/agent/tabs/agentData endpoint	CWE-611

17 Jun 2026 04:38Current

9.5High risk

Vulners AI Score9.5

CVSS 27.5

CVSS 3.19.8

EPSS0.97139