CVE-2022-28810
Zoho ManageEngine
Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
What it is
Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.
What to do
Apply updates per vendor instructions.
Vendor notices and references
- www.manageengine.com/products/self-service-password/advisory/CVE-2022-28810.html
- nvd.nist.gov/vuln/detail/CVE-2022-28810
Description and required action as published by CISA. Full record at NVD.
Other Zoho entries on the list
- ManageEngine Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CVE-2022-47966 · Jan 23, 2023
- ManageEngine Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CVE-2022-35405 · Sep 22, 2022
- Desktop Central Zoho Desktop Central Authentication Bypass Vulnerability CVE-2021-44515 · Dec 10, 2021
- ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability CVE-2021-44077 · Dec 1, 2021
- ManageEngine ServiceDesk Plus (SDP) Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability CVE-2021-37415 · Dec 1, 2021
- ManageEngine Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability CVE-2021-40539 · Nov 3, 2021