CVE-2022-28987observed exploitation

CVE-2022-28987

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

65Vexday Risk Score

Patch now. It exploitation observed in the wild and has a working public exploit.

ssvc Actepss 10%
from disclosure to weapon1633 days
Published on NVDMay 20
1st PoC+1633d
Observed exploitation+1412d
Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login.
Affected products
n/a · n/a