Zoho ManageEngine ADSelfService Plus 6121 - Username Enumeration

Zoho ManageEngine ADSelfService Plus 6121 is vulnerable to username enumeration CVE-2022-28987. The Forgot Password functionality responds differently for existing and non-existing users, allowing attackers to enumerate valid usernames. id: CVE-2022-28987 info: name: Zoho ManageEngine ADSelfServi...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539：ADSelfService Plus RCE漏洞 一：漏洞描述 ZOHO ManageEngine ADSelfService Plus是卓豪（ZOHO）公司的针对 Active Directory 和云应用程序的集成式自助密码管理和单点登录解决方案。 CVE-2021-40539 Zoho ManageEngine ADSelfService Plus 6113 及更早版本存在 REST API 身份验证绕过漏洞，远程攻击者可以利用此漏洞来控制受影响的系统。该漏洞CVSS评分：9.33，危害等级：严重 二：漏洞利用...

ADSelfService-Plus-RCE-CVE-2021-40539

ADSelfService-Plus-RCE-CVE-2021-40539 ADSelfService Plus RCE脆弱性 検出ツール 再開発 説明 ZOHO ManageEngine ADSelfService Plusは、Active Directoryおよびクラウドアプリケーション向けの統合型セルフサービスのパスワード管理およびシングルサインオンソリューションです。 ネットワーク探索 fofa:"ADSelfService" app="ZOHO-ManageEngine-ADSelfService" header="JSESSIONIDADSSP"...

CVE-2019-12476

ADSelfService-Plus-PoC CVE-2019-12476 ADSelfService Plus バージョン 4.3.3 Windows 10 での認証バイパスの PoC。 すべての Windows バージョンに影響します。 PoC 動画 再現手順 1. エンタープライズネットワークから切断します。 2. 自分のホットスポットに接続します。 3. パスワードリセットをクリックします。パスワードリセット Web アプリケーションがイントラネットでホストされている場合、シッククライアントブラウザは 404 エラーで応答するはずです。 4. このサイトの検索をクリックすると、新...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539：ADSelfService Plus RCE脆弱性 一：脆弱性の説明 ZOHO ManageEngine ADSelfService Plusは、ZOHO社のActive Directoryおよびクラウドアプリケーション向けの統合型セルフサービスパスワード管理およびシングルサインオンソリューションです。 CVE-2021-40539 Zoho ManageEngine ADSelfService Plus 6113 およびそれ以前のバージョンには、REST...

Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution

Zoho ManageEngine ADSelfService Plus version 6113 and prior are vulnerable to a REST API authentication bypass vulnerability that can lead to remote code execution. id: CVE-2021-40539 info: name: Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution author:...

ManageEngine ADSelfService Plus < Build 7001 RCE (CVE-2026-74849)

According to its self-reported version, the ManageEngine ADSelfService Plus application running on the remote host is prior to build 7001. It is, therefore, affected by a remote code execution vulnerability: - Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a...

CVE-2026-75791

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API...

CVE-2026-74849

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client...

CVE-2026-75791 Authentication bypass vulnerability

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API...

CVE-2026-75791

ManageEngine ADSelfService Plus (by Zohocorp) versions before build 7001 are affected by an authentication bypass in its REST API . The vulnerability allows unauthenticated remote attackers to bypass authentication, with a CVSS 3.1 score of 8.6 (HIGH) — low attack complexity, no privileges or use...

CVE-2026-75791 Authentication bypass vulnerability

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API...

EUVD-2026-84364

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API...

CVE-2026-74849 Remote code execution vulnerability

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client...

CVE-2026-74849

Zohocorp ManageEngine ADSelfService Plus versions prior to build 7001 contain a remote code execution vulnerability in the GINA client . The CNA-assigned CVSS v3.1 score is 9.8 (CRITICAL) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw requiring no authentic...

CVE-2026-74849 Remote code execution vulnerability

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client...

PT-2026-96712

Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to build 7001 Description A remote code execution issue exists in the GINA client, which could lead to full system compromise. Recommendations Update to build 7001...

PT-2026-96713

Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to build 7001 Description An authentication bypass exists in the REST API, allowing an attacker to gain unauthorized access to the system. Recommendations Update ManageEngine ADSelfService Plus to...

CVE-2026-74849: Improper Neutralization of Special Elements used in an OS Command

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client...

CVE-2026-75791: Missing Authentication for Critical Function

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API...