manageengine_adaudit_plus vulnerabilities | LiveThreat CVE Feed

Product

manageengine_adaudit_plus

by zohocorp · last CVE Jul 23, 2026

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities54 In the news0 Timeline

Severity mix

Critical 10High 38Medium 5Low 1

Severity

All severities54 Critical10 High38 Medium5 Low1

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add manageengine_adaudit_plus to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-47966 RansomwareIn wildKEV	9.8	100%	Jan 18	Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Affected: before 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +14 more
CVE-2026-6516	10.0	5%	Jul 23	Remote Code Execution Affected: before 8606
CVE-2023-48793	9.8	7%	Feb 2	Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature Affected: before 7.2; 7.2; 7.2; 7.2; 7.2; 7.2; +9 more
CVE-2023-48792	9.8	7%	Feb 2	Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option Affected: before 7.2; 7.2; 7.2; 7.2; 7.2; 7.2; +5 more
CVE-2022-28219	9.8	97%	Apr 5	Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution Affected: through 6.0; 7.0; 7.0; 7.0; 7.0; 7.0; +8 more
CVE-2021-42847	9.8	70%	Nov 11	Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files Affected: before 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +1 more
CVE-2020-24786	9.8	13%	Aug 31	An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817,… Affected: through 5.1; 6.0; 6.0; 6.0; 6.0; 6.0; +6 more
CVE-2020-11532	9.8	77%	May 8	Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server Affected: before 6.0.3
CVE-2018-10466	9.8	17%	May 29	Zoho ManageEngine ADAudit Plus before 5.0.0 build 5100 allows blind SQL Injection Affected: before 5.0.0
CVE-2026-11374	9.0	3%	Jun 23	Account Takeover via Predictable SSO Ticket Generation Affected: before 8703