exploit/windows/http/manageengine_adselfservice_plus_cve_2022_28810

weaponized

ManageEngine ADSelfService Plus Custom Script Execution

view exploit source metasploittype exploitpublished 2022-04-09catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-28810US	medium6.8OT critical	71.0% (99th)	KEV	2022-04-18
Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.