Security Advisory

CVE-2022-28987

5.3
MEDIUM

Vulnerability Description

Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login.
Published Date May 20, 2022
Official Source NIST NVD Advisory