Skip to content
OpenAdvisories

Product · ManageEngine

ADSelfService Plus

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2025-3833 EPSS 51%

    SQL Injection

    Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports.

    ManageEngine ADSelfService Plus
  • High 8.1
    CVE-2025-1723

    Account takeover

    Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug.

    ManageEngine ADSelfService Plus
  • High 8.8
    CVE-2024-0252

    Remote code execution

    ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load balancer component. Authentication is required in order to exploit this vulnerability.

    ManageEngine ADSelfService Plus