CVE-2023-38332: Zohocorp ManageEngine Admanager Plus

Medium severity, CVSS 6.5. EPSS: 3.7% chance of exploitation in the next 30 days.

Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure.

Affected products

• Zohocorp ManageEngine Admanager Plus: before 7.2 (fixed in 7.2); version 7.2 only

Published 2023-08-04. Last modified 2026-06-17.