CVE-2023-38743

HIGH

Zoho ManageEngine ADManager Plus Authenticated Vulnerability

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-38743 has a selected CVSS score of 7.2 (high); EIP currently links 1 repository PoC.

Description

Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jul 1, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Repository PoCs
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 23, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

manageengine_admanager_plus

Browse Zoho / manageengine_admanager_plus
VulnCheckVersion data not supplied

Proofs of concept

1

Repository PoCs

GitHubPetrusViet/CVE-2023-38743Repository PoCby PetrusViet11Not analyzed2 files

3.5 KiB

GitHub
PoC details

References

2