coldbraid

CVE-2022-28810 Zoho ManageEngine

Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.

CVSS
not scored

CWE-78CWE-259

On CISA’s exploited list

Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

Added
2023-03-07
Federal patch deadline
2023-03-28
Ransomware use
not known