Weakness (CWE)

CWE-340: Generation of Predictable Numbers or Identifiers

Class Incomplete

The product uses a scheme that generates numbers or identifiers that are more predictable than required.

Source: MITRE CWE-340

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.0

CVE-2026-11374 Public exploit

Account Takeover via Predictable SSO Ticket Generation

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.

Zohocorp ManageEngine ADSelfService Plus ManageEngine ADAudit Plus manageengine_m365_manager_plus

Jun 23, 2026