Zoho Vulnerabilities and Affected Products
Vulnerabilities associated with manageengine_adselfservice_plus.
Products
Clear product- ManageEngine6 vulnerabilities
- manageengine_opmanager3 vulnerabilities
- ManageEngine ServiceDesk2 vulnerabilities
- campaigns1 vulnerability
- Desktop Central1 vulnerability
- firewall_analyzer1 vulnerability
- ManageEngine ServiceDesk Plus (SDP)1 vulnerability
- ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus1 vulnerability
- manageengine_access_manager_plus1 vulnerability
- manageengine_adaudit_plus1 vulnerability
- manageengine_admanager_plus1 vulnerability
- manageengine_adselfservice_plus1 vulnerability
- manageengine_firewall_analyzer1 vulnerability
- Password Manager Pro (PMP)1 vulnerability
- Zoho CRM Lead Magnet1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-28987MEDIUM | Zoho ManageEngine ADSelfService Plus Username EnumerationZoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login. May 20, 20221 related artifact | CVSS5.3v3.1 | EPSS10.4% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |