CVE-2023-28342
HIGHManageEngine ADSelfService Plus < 6218 - Unauthenticated Denial of Service via Mobile App Authentication API
Title source: llmDescription
Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API.
References (2)
Core 2
Core References
Product
https://manageengine.com
Scores
CVSS v3
7.5
EPSS
0.5856
EPSS Percentile
98.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-400
Status
published
Products (5)
zohocorp/manageengine_adselfservice_plus
4.5 4510 (17 CPE variants)
zohocorp/manageengine_adselfservice_plus
5.0 5000 (12 CPE variants)
zohocorp/manageengine_adselfservice_plus
5.0.6
zohocorp/manageengine_adselfservice_plus
5.1 5100 (17 CPE variants)
zohocorp/manageengine_adselfservice_plus
5.2 5200 (3 CPE variants)
Published
Apr 05, 2023
Tracked Since
Feb 18, 2026