{"metadata": {"vulnerability": "CVE-2022-28810", "count": 49, "kinds": {"milestone": 4, "sighting": 20, "kev": 11, "other": 14}}, "data": [{"timestamp": "2022-04-08T00:00:00Z", "date_only": false, "value": "2022-04-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-28810", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-04-18T12:22:59Z", "date_only": false, "value": "2022-04-18T12:22:59.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-28810", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-04-18T13:15:00Z", "date_only": false, "value": "2022-04-18T13:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q392-QG7V-XVC4", "record": "GHSA-Q392-QG7V-XVC4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-04-18T13:15:00Z", "date_only": false, "value": "2022-04-18T13:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-28810", "record": "GSD-2022-28810", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-04-18T13:15:08.233Z", "date_only": false, "value": "2022-04-18T13:15:08.233", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-28810", "record": "FKIE_CVE-2022-28810", "field": "published"}, {"timestamp": "2022-04-18T16:24:09Z", "date_only": false, "value": "2022-04-18T16:24:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/41007", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "325c0fa8-9b02-4c59-bab7-68d284d6e0bb", "content": "\u203c CVE-2022-28810 \u203c\n\nZoho ManageEngine ADSelfService Plus before 6122 allows an authenticated user to achieve remote code execution via executable CMD.EXE input in a password field, This only occurs if a certain password sync feature is enabled that uses passwords as script arguments.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/41007"}, {"timestamp": "2022-04-19T00:00:57Z", "date_only": false, "value": "2022-04-19T00:00:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q392-QG7V-XVC4", "record": "GHSA-Q392-QG7V-XVC4", "field": "published"}, {"timestamp": "2022-04-20T19:41:20Z", "date_only": false, "value": "2022-04-20T19:41:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/manageengine_adselfservice_plus_cve_2022_28810.rb", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "0a550517-5636-4917-a268-147f6ac58fc4", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/manageengine_adselfservice_plus_cve_2022_28810.rb"}, {"timestamp": "2022-04-21T17:52:55Z", "date_only": false, "value": "2022-04-21T17:52:55.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2022-28810", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-04-26T18:07:00Z", "date_only": false, "value": "2022-04-26T18:07Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-28810", "record": "GSD-2022-28810", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-28810", "field": "timestamps.asserted_at", "uuid": "83ef7902-b06b-45e0-b55b-f371d9af1235", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-28810", "field": "timestamps.asserted_at", "uuid": "3052940b-aa4b-4740-a79d-a350ac85bd87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": true, "value": "2023-03-07", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-28810", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-28810", "field": "evidence.0.details.added_date", "uuid": "3052940b-aa4b-4740-a79d-a350ac85bd87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": true, "value": "2023-03-07", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-28810", "field": "evidence.0.details.date_added", "uuid": "83ef7902-b06b-45e0-b55b-f371d9af1235", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-28810", "field": "timestamps.first_seen_at", "uuid": "83ef7902-b06b-45e0-b55b-f371d9af1235", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-28810", "field": "timestamps.first_seen_at", "uuid": "3052940b-aa4b-4740-a79d-a350ac85bd87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-28810", "field": "status.status_updated_at", "uuid": "83ef7902-b06b-45e0-b55b-f371d9af1235", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-28810", "field": "status.status_updated_at", "uuid": "3052940b-aa4b-4740-a79d-a350ac85bd87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-07T00:00:00Z", "date_only": false, "value": "2023-03-07T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-28810", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-03-08T09:01:39Z", "date_only": false, "value": "2023-03-08T09:01:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3125", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "a4e9d65b-dd21-4eb2-9c65-d3c583823f9e", "content": "CISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "url": "https://t.me/thehackernews/3125"}, {"timestamp": "2023-03-08T09:30:41Z", "date_only": false, "value": "2023-03-08T09:30:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/dilagrafie/2401", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "cbf2cb6b-143e-4e7b-ae28-60d63e151239", "content": "Hacker News:\n\n\ud83d\udea8 ALERT! If you're using MeetsApp or MeetUp on your Android device, you need to be aware of this!\n\nPakistani hackers are using these apps to target political and military personalities in India with CapraRAT backdoor.\n\nLearn more: https://thehackernews.com/2023/03/transparent-tribe-hackers-distribute.html\n\nCybersecurity researchers have discovered a new information stealer, dubbed \"SYS01stealer,\" targeting critical government infrastructure employees, manufacturing companies, and other sectors.\n\nLearn more about it here: https://thehackernews.com/2023/03/sys01stealer-new-threat-using-facebook.html\n\nChinese cyberespionage hackers are targeting high-profile government entities in Southeast Asia with a new version of the Soul modular framework.\n\nLearn more: https://thehackernews.com/2023/03/sharp-panda-using-new-soul-framework.html\n\nCISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "url": "https://t.me/dilagrafie/2401"}, {"timestamp": "2023-03-08T22:48:21Z", "date_only": false, "value": "2023-03-08T22:48:21.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/jnL18d3PegnC8FPQiJU_eGrU92uG_tStHPpH-7KpwY-uRtM", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "2754ad14-2cb7-407c-b523-cbccf62c2f8a"}, {"timestamp": "2023-03-09T04:45:48Z", "date_only": false, "value": "2023-03-09T04:45:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/legendscrewch/2789", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "12787e07-a10c-41ee-b038-e2a1f223799c", "content": "Hacker News:\n\n\ud83d\udea8 ALERT! If you're using MeetsApp or MeetUp on your Android device, you need to be aware of this!\n\nPakistani hackers are using these apps to target political and military personalities in India with CapraRAT backdoor.\n\nLearn more: https://thehackernews.com/2023/03/transparent-tribe-hackers-distribute.html\n\nCybersecurity researchers have discovered a new information stealer, dubbed \"SYS01stealer,\" targeting critical government infrastructure employees, manufacturing companies, and other sectors.\n\nLearn more about it here: https://thehackernews.com/2023/03/sys01stealer-new-threat-using-facebook.html\n\nChinese cyberespionage hackers are targeting high-profile government entities in Southeast Asia with a new version of the Soul modular framework.\n\nLearn more: https://thehackernews.com/2023/03/sharp-panda-using-new-soul-framework.html\n\nCISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "url": "https://t.me/legendscrewch/2789"}, {"timestamp": "2023-03-09T04:45:49Z", "date_only": false, "value": "2023-03-09T04:45:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/anonhamz/2690", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "5ac79941-d7cc-4915-aa87-9712d9327644", "content": "Hacker News:\n\n\ud83d\udea8 ALERT! If you're using MeetsApp or MeetUp on your Android device, you need to be aware of this!\n\nPakistani hackers are using these apps to target political and military personalities in India with CapraRAT backdoor.\n\nLearn more: https://thehackernews.com/2023/03/transparent-tribe-hackers-distribute.html\n\nCybersecurity researchers have discovered a new information stealer, dubbed \"SYS01stealer,\" targeting critical government infrastructure employees, manufacturing companies, and other sectors.\n\nLearn more about it here: https://thehackernews.com/2023/03/sys01stealer-new-threat-using-facebook.html\n\nChinese cyberespionage hackers are targeting high-profile government entities in Southeast Asia with a new version of the Soul modular framework.\n\nLearn more: https://thehackernews.com/2023/03/sharp-panda-using-new-soul-framework.html\n\nCISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "url": "https://t.me/anonhamz/2690"}, {"timestamp": "2023-03-09T04:45:50Z", "date_only": false, "value": "2023-03-09T04:45:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/legendscrewmy/2772", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "897a91fd-2b8d-45be-9397-3332f8ecb810", "content": "Hacker News:\n\n\ud83d\udea8 ALERT! If you're using MeetsApp or MeetUp on your Android device, you need to be aware of this!\n\nPakistani hackers are using these apps to target political and military personalities in India with CapraRAT backdoor.\n\nLearn more: https://thehackernews.com/2023/03/transparent-tribe-hackers-distribute.html\n\nCybersecurity researchers have discovered a new information stealer, dubbed \"SYS01stealer,\" targeting critical government infrastructure employees, manufacturing companies, and other sectors.\n\nLearn more about it here: https://thehackernews.com/2023/03/sys01stealer-new-threat-using-facebook.html\n\nChinese cyberespionage hackers are targeting high-profile government entities in Southeast Asia with a new version of the Soul modular framework.\n\nLearn more: https://thehackernews.com/2023/03/sharp-panda-using-new-soul-framework.html\n\nCISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "url": "https://t.me/legendscrewmy/2772"}, {"timestamp": "2023-03-09T04:45:51Z", "date_only": false, "value": "2023-03-09T04:45:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/lcmysecteamch/12978", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "164583c2-b9ce-4c2a-95c9-a4d23c789a4d", "content": "Hacker News:\n\n\ud83d\udea8 ALERT! If you're using MeetsApp or MeetUp on your Android device, you need to be aware of this!\n\nPakistani hackers are using these apps to target political and military personalities in India with CapraRAT backdoor.\n\nLearn more: https://thehackernews.com/2023/03/transparent-tribe-hackers-distribute.html\n\nCybersecurity researchers have discovered a new information stealer, dubbed \"SYS01stealer,\" targeting critical government infrastructure employees, manufacturing companies, and other sectors.\n\nLearn more about it here: https://thehackernews.com/2023/03/sys01stealer-new-threat-using-facebook.html\n\nChinese cyberespionage hackers are targeting high-profile government entities in Southeast Asia with a new version of the Soul modular framework.\n\nLearn more: https://thehackernews.com/2023/03/sharp-panda-using-new-soul-framework.html\n\nCISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "url": "https://t.me/lcmysecteamch/12978"}, {"timestamp": "2023-03-28T00:00:00Z", "date_only": true, "value": "2023-03-28", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-28810", "field": "evidence.0.details.due_date", "uuid": "83ef7902-b06b-45e0-b55b-f371d9af1235", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "b7c283c8-b0df-4da1-9b11-648e92673535"}, {"timestamp": "2023-12-13T01:19:34.811Z", "date_only": false, "value": "2023-12-13T01:19:34.811503Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-28810", "record": "GSD-2022-28810", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T06:03:52.963Z", "date_only": false, "value": "2024-08-03T06:03:52.963Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-28810", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:33:54.113Z", "date_only": false, "value": "2024-12-24T20:33:54.113180Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971774", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "d868ae05-e86a-4aeb-b0a6-ee6d5321a793", "url": "https://feedsin.space/feed/CISAKevBot/items/2971774"}, {"timestamp": "2025-01-29T16:32:49.670Z", "date_only": false, "value": "2025-01-29T16:32:49.670627Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-28810", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-29T16:32:49.670Z", "date_only": false, "value": "2025-01-29T16:32:49.670627Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-28810", "record": "FKIE_CVE-2022-28810", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "4d512b0e-fa49-40be-b9f4-9d0ca9b1a324"}, {"timestamp": "2025-02-23T02:10:37Z", "date_only": false, "value": "2025-02-23T02:10:37.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "37bfa0d2-a4ac-4f37-8896-2869aa8bdf74"}, {"timestamp": "2025-02-23T04:10:45Z", "date_only": false, "value": "2025-02-23T04:10:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "45f88ffd-df2d-474e-831a-993f2cc2add4"}, {"timestamp": "2025-07-23T22:50:03.364Z", "date_only": false, "value": "2025-07-23T22:50:03.364722Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luo45cmgysl2", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "f8f49b44-d4fe-4123-a0a1-76d16ab3a4b8", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luo45cmgysl2"}, {"timestamp": "2025-10-21T23:15:41.530Z", "date_only": false, "value": "2025-10-21T23:15:41.530Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-28810", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:41.530Z", "date_only": false, "value": "2025-10-21T23:15:41.530Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-28810", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:32Z", "date_only": false, "value": "2025-10-22T00:32:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q392-QG7V-XVC4", "record": "GHSA-Q392-QG7V-XVC4", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-28810", "field": "timestamps.recorded_at", "uuid": "83ef7902-b06b-45e0-b55b-f371d9af1235", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:27:04.157Z", "date_only": false, "value": "2026-02-02T12:27:04.157045Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/83ef7902-b06b-45e0-b55b-f371d9af1235", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "88beecbb-a0da-4179-8fde-04a9096dea7a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/83ef7902-b06b-45e0-b55b-f371d9af1235"}, {"timestamp": "2026-06-17T04:39:06.870Z", "date_only": false, "value": "2026-06-17T04:39:06.870", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-28810", "record": "FKIE_CVE-2022-28810", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:58.972Z", "date_only": false, "value": "2026-06-19T12:46:58.972061Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/63ed3001-8d9f-4326-9237-ff5684d93753", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "3fef7781-f864-47f9-bb0c-ebc0c788c488", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/63ed3001-8d9f-4326-9237-ff5684d93753"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-28810", "field": "timestamps.recorded_at", "uuid": "3052940b-aa4b-4740-a79d-a350ac85bd87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:37.730Z", "date_only": false, "value": "2026-06-23T14:05:37.730589Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3052940b-aa4b-4740-a79d-a350ac85bd87", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "f338440e-0897-456b-8bf9-76f4ecf973cc", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3052940b-aa4b-4740-a79d-a350ac85bd87"}, {"timestamp": "2026-09-01T17:00:21.936Z", "date_only": false, "value": "2026-09-01T17:00:21.936793Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6650", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "2ada1e25-9b16-4617-b045-ef44b34a0e86", "content": "CISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.htm\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.17", "url": "https://t.me/cissp/6650"}, {"timestamp": "2026-09-10T02:00:04.466Z", "date_only": false, "value": "2026-09-10T02:00:04.466000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/6650", "record": "CVE-2022-28810", "field": "creation_timestamp", "uuid": "a315be2c-35d7-498b-9221-b1d635632151", "content": "CISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.htm\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.17", "url": "https://t.me/cissp/6650"}]}