CVE-2022-28810 · Sandworm Watch

Mar 7, 2023high

CVE-2022-28810: Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset. Required action: Apply updates per vendor instructions.

CVE-2022-28810EPSS 70.5%ManageEngineZoho

CISA KEV ↗ · unattributed attribution