CVE-2022-28219

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

97%p100

Published

Apr 5, 2022 (Apr 5, 2022)

Modified

Jun 17, 2026

Description

Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.

Vendors: zohocorp
Products: manageengine adaudit plus
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (97.2%)

In the news1 stories

Experts shared PoC exploit code for RCE in Zoho ManageEngine ADAudit Plus tool

Security AffairsJul 2, 19:42 UTC · Jul 2, 2022Exploit / PoC CVE-2022-28219 CVE-2020-10189

60