Skip to contentZohocorp Manageengine Adselfservice Plus vulnerabilities
- zohocorp manageengine adselfservice plus, manageengine adaudit plus, manageengine m365 manager plus +1 more +3 moreAccount Takeover via Predictable SSO Ticket GenerationCVE-2026-11374Public exploit9.0 Critical
- zohocorp manageengine adselfservice plusAuthentication BypassCVE-2025-112509.1 Critical
- manageengine adselfservice plus, zohocorp manageengine adselfservice plus +1 moreSQL InjectionCVE-2025-3833EPSS 50.5%8.1 High
- manageengine adselfservice plus, zohocorp manageengine adselfservice plus +1 moreAccount takeoverCVE-2025-17238.1 High
- manageengine adselfservice plus, zohocorp manageengine adselfservice plus +1 moreDOS VulnerabilityCVE-2024-273105.3 Medium
- manageengine adselfservice plus, zohocorp manageengine adselfservice plus +1 moreRemote code executionCVE-2024-02528.8 High
- manageengine access manager plus, asset explorer, service desk plus +39 more +41 moreManageEngine Information Disclosure in Multiple ProductsCVE-2023-61055.5 Medium
- manageengine adselfservice plus, zohocorp manageengine adselfservice plus +1 moreManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass VulnerabilityCVE-2023-35719EPSS 24.6%6.8 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus through 6113 has an authentication bypass that can be...CVE-2023-35854Public exploitDisputed9.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service...CVE-2023-28342EPSS 78.3%7.5 High
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that...CVE-2022-364139.1 Critical
- zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 moreMultiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow...CVE-2022-47966In KEVPublic exploitEPSS 99.8%9.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6203 allows a denial of service (application restart)...CVE-2022-348297.5 High
- zohocorp manageengine adselfservice plusManageEngine ADSelfService Plus v6.1 allows attackers to perform username enumeration via a...CVE-2022-28987EPSS 10.0%5.3 Medium
- zohocorp manageengine adselfservice plus, manageengine adaudit plus, manageengine admanager plus +1 more +3 moreZoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701,...CVE-2022-29457Public exploit8.8 High
- zoho manageengine, zohocorp manageengine adselfservice plus +1 moreZoho ManageEngine ADSelfService Plus before 6122 allows an authenticated user to achieve remote...CVE-2022-28810In KEVPublic exploitEPSS 71.0%6.8 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the...CVE-2022-246816.1 Medium
- zohocorp manageengine adselfservice plusManageEngine ADSelfService Plus below build 6116 stores the password policy file for each domain...CVE-2021-201484.3 Medium
- zohocorp manageengine adselfservice plusManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in...CVE-2021-201475.3 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking...CVE-2021-374229.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover.CVE-2021-374239.8 Critical
- zoho manageengine, zohocorp manageengine adselfservice plus +1 moreZoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API...CVE-2021-40539In KEVPublic exploitEPSS 99.0%9.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access...CVE-2021-374219.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper...CVE-2021-374179.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the...CVE-2021-374166.1 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in...CVE-2021-33055EPSS 18.1%9.8 Critical
- zohocorp manageengine adselfservice plusA CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1...CVE-2021-33256DisputedEPSS 79.0%8.8 High
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain...CVE-2021-318745.9 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code...CVE-2021-28958EPSS 73.1%9.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#...CVE-2021-279566.1 Medium
- zohocorp manageengine adselfservice plusA Server-side request forgery (SSRF) vulnerability in the ProductConfig servlet in Zoho...CVE-2021-272146.1 Medium
- zohocorp manageengine adselfservice plusThe custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows...CVE-2018-5353Public exploitEPSS 11.1%9.8 Critical
- zohocorp manageengine exchange reporter plus, manageengine ad360, manageengine adaudit plus +8 more +10 moreAn issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510,...CVE-2020-24786EPSS 12.8%9.8 Critical
- zohocorp manageengine adselfservice plusAn elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build...CVE-2020-115529.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution.CVE-2020-11518EPSS 19.2%9.8 Critical
- zohocorp manageengine adselfservice plusAn issue was discovered in Zoho ManageEngine ADSelfService Plus 5.6 Build 5607. An exposed...CVE-2019-71629.1 Critical
- zohocorp manageengine adselfservice plusAn open redirect vulnerability was discovered in Zoho ManageEngine ADSelfService Plus 5.x before...CVE-2019-187816.1 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.x through 5803 has CSRF on the users' profile information...CVE-2019-184118.8 High
- zohocorp manageengine admanager plus, manageengine adselfservice plus, manageengine desktop central +2 moreZoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have...CVE-2019-128767.3 High
- zohocorp manageengine adselfservice plusAn authentication bypass vulnerability in the password reset functionality in Zoho ManageEngine...CVE-2019-12476Public exploit6.8 Medium
- zohocorp manageengine adselfservice plusIn Zoho ManageEngine ADSelfService Plus 5.x through 5704, an authorization.do cross-site...CVE-2019-83466.1 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API.CVE-2019-115116.1 Medium
- zohocorp manageengine adselfservice plusAn issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses...CVE-2019-71617.5 High
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF.CVE-2019-390510.0 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.CVE-2018-206649.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature.CVE-2018-20485Public exploit6.1 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout...CVE-2018-20484Public exploit6.1 Medium
- zohocorp manageengine adselfservice plusCross-site scripting (XSS) vulnerability in ZOHO ManageEngine ADSelfService Plus before 5.2 Build...CVE-2014-37794.3 Medium
- zohocorp manageengine adselfservice plusMultiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine...CVE-2011-5105Public exploit4.3 Medium
- zohocorp manageengine adselfservice plusMultiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search...CVE-2010-3274Public exploitEPSS 21.0%4.3 Medium
- Show olderLoading…