← Back to browse · API

CVE-2023-28342

Severity

HIGH

CVSS

7.5

EPSS

0.78338

Risk score

57.42

CISA KEV

No

PoC

No

Published

2023-04-05

Modified

2025-02-13

First seen

2026-08-07

Aliases

EUVD-2023-32040, GHSA-238J-PXJV-RH2P

Products

n/a:n/a n/a

Sources

euvd EUVD-2023-32040

Description

Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API.

References