CVE-2023-31492

PoC —

CVSS 3.1

6.5 medium

EPSS

8%p94

Published

Aug 17, 2023 (Aug 17, 2023)

Modified

Jun 17, 2026

Description

Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users.

Vendors: zohocorp
Products: manageengine admanager plus
Weakness: CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.9%)

In the news0 stories

No ingested article mentions this CVE yet.