CISA KEV

CVE-2022-28810

Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.

VendorZoho

ProductManageEngine

EPSS71.0%

Added to KEVMar 07, 2023

Remediation DueMar 28, 2023

Known Ransomware UseUnknown

CWECWE-78, CWE-259

Required Action

Apply updates per vendor instructions.

From Disclosure to Action

Know how quickly you need to move.

For CVE-2022-28810, added to the catalogue on Mar 07, 2023 with a remediation deadline of Mar 28, 2023.

Added to KEVMar 07, 2023

Seraph AlertSame day

Remediation DueMar 28, 2023

ValidationOngoing

Overdue1310 days overdue

Recommended action: Apply vendor remediation guidance.

Seraph Context

Technology Watch Match

Available for technologies you monitor inside Seraph CTI.

Relevant Threat Actors

Surfaced automatically when a tracked actor is linked to this CVE.

Sector Context

Shown when this vendor/product is relevant to your industry.

Exploitation Context

Campaign and indicator context, where Seraph analysts have published it.

References

More from Zoho in the KEV catalogue.

CVE-2022-47966ManageEngineAdded Jan 23, 2023 CVE-2022-35405ManageEngineAdded Sep 22, 2022 CVE-2021-44515Desktop CentralAdded Dec 10, 2021

Does this affect technology you run?

Declare your technology stack inside Seraph CTI and get notified the moment a KEV entry matches it.

Explore Seraph CTI Back to KEV Catalogue