← Back

CVE-2022-42904

nvd nist
Published: Nov 18, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD

Description

Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings.

Affected (27)

Zohocorp
1 product
Manageengine Admanager Plus
Configuration A
27 vulnerable
Vulnerable SoftwareAffected Versions
Zohocorp
Manageengine Admanager Plus
Before 7.1
Manageengine Admanager Plus
Version 7.1
Manageengine Admanager Plus
Version 7.1 7100
Manageengine Admanager Plus
Version 7.1 7101
Manageengine Admanager Plus
Version 7.1 7102
Manageengine Admanager Plus
Version 7.1 7110
Manageengine Admanager Plus
Version 7.1 7111
Manageengine Admanager Plus
Version 7.1 7112
Manageengine Admanager Plus
Version 7.1 7113
Manageengine Admanager Plus
Version 7.1 7114
Manageengine Admanager Plus
Version 7.1 7115
Manageengine Admanager Plus
Version 7.1 7116
Manageengine Admanager Plus
Version 7.1 7117
Manageengine Admanager Plus
Version 7.1 7118
Manageengine Admanager Plus
Version 7.1 7120
Manageengine Admanager Plus
Version 7.1 7121
Manageengine Admanager Plus
Version 7.1 7122
Manageengine Admanager Plus
Version 7.1 7123
Manageengine Admanager Plus
Version 7.1 7124
Manageengine Admanager Plus
Version 7.1 7125
Manageengine Admanager Plus
Version 7.1 7126
Manageengine Admanager Plus
Version 7.1 7130
Manageengine Admanager Plus
Version 7.1 7131
Manageengine Admanager Plus
Version 7.1 7140
Manageengine Admanager Plus
Version 7.1 7141
Manageengine Admanager Plus
Version 7.1 7150
Manageengine Admanager Plus
Version 7.1 7151

Related CWEs

CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (2)

Source: cve@mitre.org
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory

Timeline

No history available yet.