CVE-2022-34829

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-07-04 · updated 2026-06-17

Description

Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service (application restart) via a crafted payload to the Mobile App Deployment API.

Affected products

ManageEngine ADSelfService Plus: before 6.2; 6.2-6200, 6.2-6201, 6.2-6202 — fixed in 6.2

How to fix

Upgrade to a fixed version: ManageEngine ADSelfService Plus 6.2. Check the vendor advisory for mitigations.

References

https://www.manageengine.com/products/self-service-password/advisory/CVE-2022-34829.html
https://www.manageengine.com/products/self-service-password/advisory/CVE-2022-34829.html

Get alerted when CVE-2022-34829 or the next vulnerability affects your stack