CVE-2023-28342

Published Apr 5, 2023 CVSS 3.1 · 7.5 High EPSS 78.3% KEV · Not listed
Description
Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Weaknesses CWE-400
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Feb 13, 2025, 4:00 PM
Reserved
Mar 14, 2023, 12:00 AM
Status
Modified
Published
Apr 5, 2023, 7:15 PM
Modified
Jun 17, 2026, 5:47 AM