cbcvebase.
CVE-2023-28342
published 2023-04-05

CVE-2023-28342: Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API.

PriorityP357high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
78.64%
99.5th percentile
Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API.

Affected

14 ranges
VendorProductVersion rangeFixed in
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
zohocorpmanageengine_adselfservice_plus——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.