Manageengine Adselfservice Plus
Approved changes feed: RSS · Atom
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Zohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502) |
|---|---|
| Product | Manageengine Adselfservice Plus (3fbdb5d5-250e-50f0-93a4-67a4b1106c54) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3183 |
vulnerable | 2026-07-29 00:46:20.082718 |
Multi Factor Auth Bypass
HIGH (7.1)
Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass.
Published: 2026-07-21T06:58:53.375Z
Updated: 2026-07-21T12:18:37.554Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11374 |
vulnerable | 2026-07-29 00:23:31.012245 |
Account Takeover via Predictable SSO Ticket Generation
CRITICAL (9)
In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted
by an unauthenticated user, leading to account takeover.
Published: 2026-06-23T08:19:30.638Z
Updated: 2026-06-24T15:48:27.756Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2740 |
vulnerable | 2026-06-08 07:55:17.451597 |
Remote Code Execution
HIGH (8.4)
Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to Authenticated Remote code execution in the agent machines due to the bug in the 3rd party dependency.
Published: 2026-05-21T12:36:17.522Z
Updated: 2026-05-22T03:55:40.291Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1367 |
vulnerable | 2026-06-08 07:49:08.434974 |
SQL Injection
HIGH (8.3)
Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the search report option.
Published: 2026-02-23T06:54:25.937Z
Updated: 2026-02-26T14:44:11.687Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3833 |
vulnerable | 2026-06-08 07:23:09.965806 |
SQL Injection
HIGH (8.1)
Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports.
Published: 2025-05-14T11:00:27.309Z
Updated: 2025-05-14T13:30:00.739Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1723 |
vulnerable | 2026-06-08 07:08:37.907716 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11250 |
vulnerable | 2026-06-08 07:02:28.473565 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27310 |
vulnerable | 2026-06-08 06:31:28.497383 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0252 |
vulnerable | 2026-06-08 06:22:00.151472 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6105 |
vulnerable | 2026-06-08 06:19:45.632354 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35854 |
vulnerable | 2026-06-08 06:06:27.902280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47966 |
vulnerable | 2026-06-08 05:50:41.064264 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36413 |
vulnerable | 2026-06-08 05:46:07.364393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34829 |
vulnerable | 2026-06-08 05:46:03.612033 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29457 |
vulnerable | 2026-06-08 05:42:47.796549 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28810 |
vulnerable | 2026-06-08 05:42:45.854643 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24681 |
vulnerable | 2026-06-08 05:41:01.310906 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40539 |
vulnerable | 2026-06-08 05:35:18.795845 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37423 |
vulnerable | 2026-06-08 05:32:54.251733 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37422 |
vulnerable | 2026-06-08 05:32:54.241794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37421 |
vulnerable | 2026-06-08 05:32:54.241255 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37417 |
vulnerable | 2026-06-08 05:32:54.229541 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37416 |
vulnerable | 2026-06-08 05:32:54.225697 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33055 |
vulnerable | 2026-06-08 05:32:08.670444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31874 |
vulnerable | 2026-06-08 05:31:54.055758 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27956 |
vulnerable | 2026-06-08 05:31:22.799729 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20148 |
vulnerable | 2026-06-08 05:29:08.606140 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20147 |
vulnerable | 2026-06-08 05:29:08.594640 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24786 |
vulnerable | 2026-06-08 05:22:35.495463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11552 |
vulnerable | 2026-06-08 05:16:47.408750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11518 |
vulnerable | 2026-06-08 05:16:47.297688 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12476 |
vulnerable | 2026-06-08 05:12:39.190536 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5353 |
vulnerable | 2026-06-08 05:11:50.644714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3779 |
vulnerable | 2026-06-08 05:05:42.683286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3274 |
vulnerable | 2026-06-08 04:55:13.911848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3273 |
vulnerable | 2026-06-08 04:55:13.911451 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3272 |
vulnerable | 2026-06-08 04:55:13.910981 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.