---
id: 10251
title: "CVE-2022-28219: Unauthenticated XXE to RCE and Domain Compromise in ManageEngine ADAudit Plus"
cve: CVE-2022-28219
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/disclosures/red-team-blog-cve-2022-28219/"
published_at: "2022-06-29T13:13:31Z"
tags: ["rce", "vulnerability-research", "active-directory", "manageengine", "xxe", "horizon3", "cve-2022-28219"]
phying_url: "https://phying.com/item/10251"
lang: en
---

# CVE-2022-28219: Unauthenticated XXE to RCE and Domain Compromise in ManageEngine ADAudit Plus

## Summary

CVE-2022-28219 is an unauthenticated remote code execution vulnerability affecting Zoho ManageEngine ADAudit Plus, a compliance tool used by enterprises to monitor changes to Active Directory.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2022-28219
- **Published:** 2022-06-29T13:13:31Z
- **Original:** https://horizon3.ai/attack-research/disclosures/red-team-blog-cve-2022-28219/
- **Phying News:** https://phying.com/item/10251