The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows remote attackers to execute code and escalate privileges via spoofing. It does not authenticate the intended server before opening a browser window. An unauthenticated attacker capable of conducting a spo...
9.8CVSS
9.8AI Score
0.036EPSS
Zoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution.
9.8CVSS
9.8AI Score
0.008EPSS
An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not properly enforce user privileges associated with a Certificate dialog. This vulnerability could allow an unauthenticated attacker to escalate privileges on a Windows host. An atta...
9.8CVSS
9.3AI Score
0.106EPSS
An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecurity Plus before build number 6033, RecoverManager Plus before build number 6017, EventLog Analyzer before build number ...
9.8CVSS
9.4AI Score
0.024EPSS