RaqibCTI
CVE

CVE-2022-28810

P2
Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
Zoho · ManageEngine
Date added (CISA)
2023-03-07
Remediation due
2023-03-28
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.

Source: NVD ↗ · CISA KEV Catalog ↗

CVE-2022-28810: Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability · RaqibCTI