{"id":"CVE-2019-7161","aliases":["EUVD-2019-16711","GHSA-645f-643g-f2h4"],"status":"published","title":"An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses...","description":"An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05612,"percentile":0.92971,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2019-03-18T20:39:46Z","modified":"2026-06-17T02:40:11Z","products":[{"vendor":"zohocorp","product":"manageengine_adselfservice_plus"}],"references":[{"url":"https://www.excellium-services.com/cert-xlm-advisory/cve-2019-7161/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://www.manageengine.com/products/self-service-password/release-notes.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Release Notes","Vendor Advisory"]},{"url":"https://www.excellium-services.com/cert-xlm-advisory"},{"url":"https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-7161"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7161"},{"url":"https://www.excellium-services.com/cert-xlm-advisory/cve-2019-7161"},{"url":"https://github.com/advisories/GHSA-645f-643g-f2h4"}],"sources":{"cve":[{"id":"CVE-2019-7161","description":"An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.","status":"published","published":"2019-03-18T20:39:46Z","modified":"2025-05-30T16:01:16.222Z","updated_at":"2026-11-02T14:32:22.854093Z"}],"euvd":[{"id":"EUVD-2019-16711","description":"An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.","status":"published","published":"2019-03-18T20:39:46Z","modified":"2025-05-30T16:01:16Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"none"}],"updated_at":"2026-11-02T20:32:34.145186Z"}],"ghsa":[{"id":"GHSA-645f-643g-f2h4","title":"An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses...","description":"An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.","status":"published","published":"2022-05-13T01:08:16Z","modified":"2025-05-30T18:31:44Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T15:02:31.34634Z"}],"nvd":[{"id":"CVE-2019-7161","description":"An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.","status":"published","published":"2019-03-21T16:01:10.78Z","modified":"2026-06-17T02:40:11.657Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:05:07.268578Z"}]}}