Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.4:6400:*:*:*:*:*:*

part: a version: 6.4 update: 6400

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Adselfservice Plus (3fbdb5d5-250e-50f0-93a4-67a4b1106c54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-27310 vulnerable 2026-06-03 14:55:17.355000 DOS Vulnerability
MEDIUM (5.3)
Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input.
Published: 2024-05-27T17:26:14.229Z
Updated: 2024-10-07T19:44:05.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0252 vulnerable 2026-06-03 14:54:02.002258 Remote code execution
HIGH (8.8)
ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load balancer component. Authentication is required in order to exploit this vulnerability.
Published: 2024-01-11T07:57:12.987Z
Updated: 2025-06-17T21:09:15.509Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.