CVE-2022-28987

Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login

published May 20, 2022

CVSS
—
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10026 · 95.6th percentile
Published
2022-05-20T02:10Z
EPSS history
Timeline
  • 20 MAY 02:10Z
    Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login
    cvelistv5