ManageEngine ADAudit Plus - XML External Entity Injection (CVE-2022-28219)

ManageEngine AdAudit Plus server is vulnerable to CVE-2022-28219, a XML External Entity Injection (XXE) vulnerability, affecting the /api/agent/tabs/agentData endpoint. The root cause of this vulnerability consists of the improper configuration of XML parser, leading to a server-side request forgery (SSRF).

The risk exists that a remote unauthenticated attacker can include malicious content or access sensitive information.

Upgrade the ManageEngine ADAudit Plus to a version higher than 7060.

https://nvd.nist.gov/vuln/detail/CVE-2022-28219

https://www.manageengine.com/products/active-directory-audit/cve-2022-28219.html