All CVE records

CVE-2022-28810 — Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

CISA KEV listed Added March 7, 2023 Remediate by March 28, 2023

Description

Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.

Required action

Apply updates per vendor instructions.

Notes

https://www.manageengine.com/products/self-service-password/advisory/CVE-2022-28810.html; https://nvd.nist.gov/vuln/detail/CVE-2022-28810

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer