MA
IT Management
ManageEngine ADSelfService Plus
On CISA KEVExploited in the wildRansomware-linked
60
CVEs
6
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 22High 14Medium 19Low 0
Watch
Add ManageEngine ADSelfService Plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-0252 | 8.8 | Jan 11 | ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load balancer component Affected: before 6.4; 6.4; 6.4 |
| CVE-2022-29457 | 8.8 | Apr 18 | Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path… Affected: before 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +17 more |
| CVE-2021-33256 | 8.8 | Aug 9 | A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unauthenticated user Affected: 6.1 |
| CVE-2019-18411 | 8.8 | Nov 6 | Zoho ManageEngine ADSelfService Plus 5.x through 5803 has CSRF on the users' profile information page Affected: 5.0; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2026-75791 | 8.6 | Sep 22 | Authentication bypass vulnerability Affected: before 7001 |
| CVE-2026-2740 | 8.4 | May 21 | Remote Code Execution Affected: before 6525 |
| CVE-2026-1367 | 8.3 | Feb 23 | SQL Injection Affected: before 6523 |
| CVE-2025-3833 | 8.1 | May 14 | SQL Injection Affected: before 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +9 more |
| CVE-2025-1723 | 8.1 | Mar 3 | Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling Affected: before 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +6 more |
| CVE-2023-28342 | 7.5 | Apr 5 | Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API Affected: 4.5; 4.5; 4.5; 4.5; 4.5; 4.5; +34 more |
| CVE-2022-34829 | 7.5 | Jul 4 | Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service (application restart) via a crafted payload to the Mobile App Deployment API Affected: before 6.2; 6.2; 6.2; 6.2 |
| CVE-2019-7161 | 7.5 | Mar 18 | An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704 Affected: 5.0; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more |
| CVE-2019-12876 | 7.3 | Jul 17 | Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to… Affected: 5.7 |
| CVE-2026-3183 | 7.1 | Jul 21 | Multi Factor Auth Bypass Affected: before 6524 |
Showing 14