CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

373 matches found

Vulnrichment•added 2026/01/13 1:35 p.m.•2 views

CVE-2025-11250 Authentication Bypass

Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations...

9.1CVSS6.5AI score0.00122EPSS

Exploits0References1

CNNVD•added 2026/01/13 12:0 a.m.•2 views

Zoho ManageEngine ADSelfService Plus 安全漏洞

ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. A security vulnerability exists in Zoho ManageEngine ADSelfService Plus prior to version 6519, which stems from a filter...

9.1CVSS5.8AI score0.00122EPSS

Exploits0References1

Positive Technologies•added 2026/01/13 12:0 a.m.•2 views

PT-2026-2435

Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to 6519 Description ManageEngine ADSelfService Plus versions before 6519 are susceptible to an authentication bypass due to improper filter configurations. This allows unauthorized access. The iss...

9.1CVSS6.8AI score0.00122EPSS

Exploits0References10

RedhatCVE•added 2026/01/09 11:28 a.m.•15 views

CVE-2021-33055

Zoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in non-English editions...

10CVSS8.1AI score0.20123EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 11:25 a.m.•0 views

CVE-2021-28958

Zoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code Execution while changing the password...

9.8CVSS7.6AI score0.48942EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 11:22 a.m.•7 views

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

5.9CVSS6.2AI score0.01096EPSS

Exploits1References1

RedhatCVE•added 2026/01/09 10:19 a.m.•4 views

CVE-2019-18781

An open redirect vulnerability was discovered in Zoho ManageEngine ADSelfService Plus 5.x before 5809 that allows attackers to force users who click on a crafted link to be sent to a specified external site...

6.1CVSS6.7AI score0.00193EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 10:11 a.m.•4 views

CVE-2019-11511

Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API...

6.1CVSS5.9AI score0.02604EPSS

Exploits0References1