PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2022-28219: Unauthenticated XXE to RCE and Domain Compromise in ManageEngine ADAudit Plus

horizon3.ai | vulnerability | CVE-2022-28219 | #rce | #vulnerability-research | #active-directory | #manageengine | #xxe | #horizon3 | #cve-2022-28219
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CVE-2022-28219 is an unauthenticated remote code execution vulnerability affecting Zoho ManageEngine ADAudit Plus, a compliance tool used by enterprises to monitor changes to Active Directory.
CVE
CVE-2022-28219
Published
Collected

Related coverage

vulnerability · horizon3.ai
ManageEngine CVE-2022-47966 Technical Deep Dive
# ManageEngine CVE-2022-47966 Technical Deep Dive James Horseman January 19, 2023 Attack Blogs ## Introduction On January 10, 2023, ManageEngine released a security advisory for CVE-2022-47966...
vulnerability · horizon3.ai
ManageEngine CVE-2022-47966 IOCs
# ManageEngine CVE-2022-47966 IOCs James Horseman January 13, 2023 Attack Blogs ## Introduction The recent ManageEngine CVE-2022-47966 is a pre-authentication remote code execution vulnerability....
vulnerability · horizon3.ai
[CVE-2021-41765] Multiple Vulnerabilities in ResourceSpace
Advisory for CVE-2021-41765, a critical SQL injection vulnerability leading to remote code execution, by the Horizon3 red team.
vulnerability · horizon3.ai
[CVE-2020-3952] Compromising vCenter via SAML Certificates
A common attack path that Horizon3 has identified across many of its customers is abusing access to the VMware vCenter Identity Provider (IdP) certificate.
vulnerability · horizon3.ai
[CVE-2021-38647] OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments
# OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments Zach Hanley September 16, 2021 Attack Blogs Overview On September 14, multiple vulnerabilities were discovered by researchers at...
vulnerability · horizon3.ai
Confluence Server OGNL Injection: CVE-2021-26084
On August 25, 2021, Atlassian released a security advisory for CVE-2021-26084, an OGNL injection vulnerability found within a component of Confluence Server and…
Back