Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2022-29457

🗓️ 18 Apr 2022 19:47:07Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 138 Views🌐 WEB

Zoho ManageEngine ADSelfService Plus, ADAuditPlus, Exchange Reporter Plus, and ADManagerPlus NTLM Hash disclosure vulnerabilit

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today		ManageEngine ADSelfService Plus Build 6118 - NTLMv2 Hash Exposure Exploit
12 May 202200:00
–zdt
ATTACKERKB		CVE-2022-29457
18 Apr 202220:15
–attackerkb
Circl		CVE-2022-29457
19 Apr 202200:23
–circl
CNNVD		ZOHO ManageEngine ADSelfService Plus 安全漏洞
18 Apr 202200:00
–cnnvd
CNVD		ZOHO ManageEngine ADSelfService Plus Information Disclosure Vulnerability (CNVD-2022-55221)
20 Apr 202200:00
–cnvd
Cvelist		CVE-2022-29457
18 Apr 202219:47
–cvelist
Exploit DB		ManageEngine ADSelfService Plus Build 6118 - NTLMv2 Hash Exposure
11 May 202200:00
–exploitdb
EUVD		EUVD-2022-33795
3 Oct 202520:07
–euvd
NVD		CVE-2022-29457
18 Apr 202220:15
–nvd
OSV		CVE-2022-29457
18 Apr 202220:15
–osv
Rows per page
NVD
Node
zohocorpmanageengine_adaudit_plusRange<7.0.0
OR
zohocorpmanageengine_adaudit_plusMatch7.0.0-
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07000
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07002
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07003
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07004
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07005
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07006
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07007
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07008
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07050
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07051
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07052
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07053
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07054
OR
zohocorpmanageengine_adaudit_plusMatch7.0.07055
OR
zohocorpmanageengine_admanager_plusRange<7.1
OR
zohocorpmanageengine_admanager_plusMatch7.1-
OR
zohocorpmanageengine_admanager_plusMatch7.17100
OR
zohocorpmanageengine_admanager_plusMatch7.17101
OR
zohocorpmanageengine_admanager_plusMatch7.17102
OR
zohocorpmanageengine_admanager_plusMatch7.17110
OR
zohocorpmanageengine_admanager_plusMatch7.17111
OR
zohocorpmanageengine_admanager_plusMatch7.17112
OR
zohocorpmanageengine_admanager_plusMatch7.17113
OR
zohocorpmanageengine_admanager_plusMatch7.17114
OR
zohocorpmanageengine_admanager_plusMatch7.17115
OR
zohocorpmanageengine_admanager_plusMatch7.17116
OR
zohocorpmanageengine_admanager_plusMatch7.17117
OR
zohocorpmanageengine_admanager_plusMatch7.17118
OR
zohocorpmanageengine_admanager_plusMatch7.17120
OR
zohocorpmanageengine_admanager_plusMatch7.17121
OR
zohocorpmanageengine_admanager_plusMatch7.17122
OR
zohocorpmanageengine_admanager_plusMatch7.17123
OR
zohocorpmanageengine_admanager_plusMatch7.17124
OR
zohocorpmanageengine_admanager_plusMatch7.17125
OR
zohocorpmanageengine_admanager_plusMatch7.17126
OR
zohocorpmanageengine_admanager_plusMatch7.17130
OR
zohocorpmanageengine_adselfservice_plusRange<6.1
OR
zohocorpmanageengine_adselfservice_plusMatch6.1-
OR
zohocorpmanageengine_adselfservice_plusMatch6.16100
OR
zohocorpmanageengine_adselfservice_plusMatch6.16101
OR
zohocorpmanageengine_adselfservice_plusMatch6.16102
OR
zohocorpmanageengine_adselfservice_plusMatch6.16103
OR
zohocorpmanageengine_adselfservice_plusMatch6.16104
OR
zohocorpmanageengine_adselfservice_plusMatch6.16105
OR
zohocorpmanageengine_adselfservice_plusMatch6.16106
OR
zohocorpmanageengine_adselfservice_plusMatch6.16107
OR
zohocorpmanageengine_adselfservice_plusMatch6.16108
OR
zohocorpmanageengine_adselfservice_plusMatch6.16109
OR
zohocorpmanageengine_adselfservice_plusMatch6.16110
OR
zohocorpmanageengine_adselfservice_plusMatch6.16111
OR
zohocorpmanageengine_adselfservice_plusMatch6.16112
OR
zohocorpmanageengine_adselfservice_plusMatch6.16113
OR
zohocorpmanageengine_adselfservice_plusMatch6.16114
OR
zohocorpmanageengine_adselfservice_plusMatch6.16115
OR
zohocorpmanageengine_adselfservice_plusMatch6.16116
OR
zohocorpmanageengine_adselfservice_plusMatch6.16117
OR
zohocorpmanageengine_adselfservice_plusMatch6.16118
OR
zohocorpmanageengine_adselfservice_plusMatch6.16119
OR
zohocorpmanageengine_adselfservice_plusMatch6.16120
OR
zohocorpmanageengine_exchange_reporter_plusRange<5.7
OR
zohocorpmanageengine_exchange_reporter_plusMatch5.7-
OR
zohocorpmanageengine_exchange_reporter_plusMatch5.75700
ParameterPositionPathDescriptionCWE
loginNamerequest bodyj_security_checkNTLM hash disclosure during authentication flow via ADSelfService Plus configuration.CWE-522
domainNamerequest bodyj_security_checkNTLM hash disclosure during authentication flow via ADSelfService Plus configuration.CWE-522
j_usernamerequest bodyj_security_checkNTLM hash disclosure during authentication flow via ADSelfService Plus configuration.CWE-522
j_passwordrequest bodyj_security_checkNTLM hash disclosure during authentication flow via ADSelfService Plus configuration.CWE-522
AUTHRULE_NAMErequest bodyj_security_checkNTLM hash disclosure during authentication flow via ADSelfService Plus configuration.CWE-522
adscsrfrequest bodyj_security_checkNTLM hash disclosure during authentication flow via ADSelfService Plus configuration.CWE-522
SCHEDULE_IDrequest bodyServletAPI/Reports/saveReportSchedulerExploitation path for scheduling a report to trigger NTLMv2 hash capture via a crafted STORAGE_PATH (UNC) exposure.CWE-522
ADMIN_STATUSrequest bodyServletAPI/Reports/saveReportSchedulerExploitation path for scheduling a report to trigger NTLMv2 hash capture via a crafted STORAGE_PATH (UNC) exposure.CWE-522
SCHEDULE_NAMErequest bodyServletAPI/Reports/saveReportSchedulerExploitation path for scheduling a report to trigger NTLMv2 hash capture via a crafted STORAGE_PATH (UNC) exposure.CWE-522
DOMAINSrequest bodyServletAPI/Reports/saveReportSchedulerExploitation path for scheduling a report to trigger NTLMv2 hash capture via a crafted STORAGE_PATH (UNC) exposure.CWE-522
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 04:40Current
8.5High risk
Vulners AI Score8.5
CVSS 26.5
CVSS 3.18.8
EPSS0.07724
CWE-522
cve-2022-29457zohomanageengineadselfservice plusadauditplusexchange reporter plusadmanagerplusntlm hash disclosure
138