Live › vulnerability › CVE-2022-28810
Go to dashboardZoho ManageEngine ADSelfService Plus has an unspecified flaw that allows remote code execution during a password change or reset. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Zoho ManageEngine | vendor | – | – |
| zohocorp manageengine adselfservice plus | vendor | < 6.1 | 6.1 |
| zohocorp manageengine adselfservice plus | vendor | = 6.1 | – |
Unknown from the sources.
Apply the vendor update per Zoho ManageEngine instructions; the affected and fixed versions are not stated in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator password, attackers may be able to abuse this functionality with minimal effort. Additionally, a remote and partially authenticated attacker may be able to inject arbitrary commands into the custom script due to an unsanitized password field.
This page as .md · .json · in your agent: get_signal("CVE-2022-28810")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.