# Zohocorp Manageengine Adaudit Plus


- [CVE-2022-47966](https://insights.sbomify.com/CVE-2022-47966/): Zoho ManageEngine Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2023-48792](https://insights.sbomify.com/CVE-2023-48792/): SQL injection in n/a (critical 9.8)
- [CVE-2023-48793](https://insights.sbomify.com/CVE-2023-48793/): SQL injection in n/a (critical 9.8)
- [CVE-2022-28219](https://insights.sbomify.com/CVE-2022-28219/): XML external entity in n/a (critical 9.8)
- [CVE-2021-42847](https://insights.sbomify.com/CVE-2021-42847/): File upload in n/a (critical 9.8)
- [CVE-2020-24786](https://insights.sbomify.com/CVE-2020-24786/): Auth bypass in n/a (critical 9.8)
- [CVE-2020-11532](https://insights.sbomify.com/CVE-2020-11532/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2018-10466](https://insights.sbomify.com/CVE-2018-10466/): SQL injection in n/a (critical 9.8)
- [CVE-2022-29457](https://insights.sbomify.com/CVE-2022-29457/): Information disclosure in n/a (high 8.8)
- [CVE-2022-24978](https://insights.sbomify.com/CVE-2022-24978/): Information disclosure in n/a (high 8.8)
- [CVE-2020-11531](https://insights.sbomify.com/CVE-2020-11531/): Path traversal in n/a (high 8.8)
- [CVE-2025-27709](https://insights.sbomify.com/CVE-2025-27709/): SQL Injection (high 8.3)

---
From sbomify Insights: https://insights.sbomify.com/products/zohocorp/manageengine-adaudit-plus/