CVE:CVE-2022-28219
CNNVD:CNNVD-202204-2014
ZOHO ManageEngine ADAudit Plus是美国ZOHO公司的用于简化审计、证明合规性和检测威胁。
ZOHO ManageEngine ADAudit Plus 7060 之前存在代码问题漏洞，未经身份验证的攻击者可以利用该漏洞进行远程代码执行。
solution:Upgrade zohocorp manageengine_adaudit_plus to a higher version than 6.0,7.0:7000,7.0:7002,7.0:7003,7.0:7004,7.0:7005,7.0:7006,7.0:7007,7.0:7008,7.0:7050,7.0:7051,7.0:7052,7.0:7053,7.0:7054,and avoid the version (,6.0],7.0:7000,7.0:7002,7.0:7003,7.0:7004,7.0:7005,7.0:7006,7.0:7007,7.0:7008,7.0:7050,7.0:7051,7.0:7052,7.0:7053,7.0:7054