CVE-2022-29457: Zohocorp ManageEngine Adaudit Plus

High severity, CVSS 8.8. EPSS: 7.9% chance of exploitation in the next 30 days.

Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps.

Affected products

• Zohocorp ManageEngine Adaudit Plus: before 7.0.0 (fixed in 7.0.0); version 7.0.0 only
• Zohocorp ManageEngine Admanager Plus: before 7.1 (fixed in 7.1); version 7.1 only
• Zohocorp ManageEngine Adselfservice Plus: before 6.1 (fixed in 6.1); version 6.1 only
• Zohocorp ManageEngine Exchange Reporter Plus: before 5.7 (fixed in 5.7); version 5.7 only

Published 2022-04-18. Last modified 2026-06-17.