ADSelfService Plus vulnerabilities

2 known vulnerabilities in ADSelfService Plus from ManageEngine. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  ADSelfService Plus: Improper Authentication

  CVE-2025-1723Mar 3, 2025ManageEngineEPSS 1.47%

  Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug.

• 8.8 High severity

  ADSelfService Plus: Improper Control of Generation of Code

  CVE-2024-0252Jan 11, 2024ManageEngineEPSS 7.81%

  ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load balancer component. Authentication is required in order to exploit this vulnerability.