CVE-2022-28219: Zohocorp ManageEngine Adaudit Plus

Critical severity, CVSS 9.8. EPSS: 97.2% chance of exploitation in the next 30 days.

Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.

Affected products

• Zohocorp ManageEngine Adaudit Plus: up to and including 6.0; version 7.0 only

Published 2022-04-05. Last modified 2026-06-17.