How many CVEs does zohocorp manageengine adselfservice plus have?

zohocorp manageengine adselfservice plus has 55 published CVE records since 2011.

How many zohocorp manageengine adselfservice plus CVEs are in CISA KEV?

Yes — 3 of zohocorp manageengine adselfservice plus's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for zohocorp manageengine adselfservice plus vulnerabilities?

Yes — 13 of zohocorp manageengine adselfservice plus's CVEs have a known public exploit.

Which versions of zohocorp manageengine adselfservice plus are affected?

48 distinct zohocorp manageengine adselfservice plus versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in zohocorp manageengine adselfservice plus CVEs?

zohocorp manageengine adselfservice plus's CVEs most often map to these CWE weakness types: CWE-290 (Authentication Bypass by Spoofing), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-287 (Improper Authentication), CWE-340 (Generation of Predictable Numbers or Identifiers).

What is the average severity of zohocorp manageengine adselfservice plus CVEs?

The average CVSS base score across zohocorp manageengine adselfservice plus's scored CVEs is 7.6.

zohocorp manageengine adselfservice plus Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every zohocorp manageengine adselfservice plus version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

6.1 <= v <= 6.120 CVEs
< 6.113 CVEs
5.7 <= v <= 5.712 CVEs
5.5 <= v <= 5.59 CVEs
5.6 <= v <= 5.69 CVEs
5.0 <= v <= 5.08 CVEs
5.1 <= v <= 5.18 CVEs
5.2 <= v <= 5.28 CVEs
5.3 <= v <= 5.38 CVEs
5.4 <= v <= 5.48 CVEs
5.8 <= v <= 5.86 CVEs
4.5 <= v <= 4.54 CVEs
6.0 <= v <= 6.04 CVEs
6.2 <= v <= 6.24 CVEs
< 6.23 CVEs
< 6.53 CVEs
<= 4.43 CVEs
6.5 <= v <= 6.53 CVEs
< 6.42 CVEs
<= 5.72 CVEs
<= 6.02 CVEs
5.0.6 <= v <= 5.0.62 CVEs
6.4 <= v <= 6.42 CVEs
< 5.51 CVE
< 6.31 CVE
< 65191 CVE
< 65231 CVE
< 65241 CVE
< 65251 CVE
< 65291 CVE
<= 5.21 CVE
<= 5.81 CVE
<= builds_64001 CVE
4.3.3 <= v < 5.0.61 CVE
6.3 <= v <= 6.31 CVE

Fixed in

6.113 CVEs
6.23 CVEs
6.53 CVEs
6.42 CVEs
> builds_64001 CVE
5.0.61 CVE
5.51 CVE
6.31 CVE
65191 CVE
65231 CVE
65241 CVE
65251 CVE
65291 CVE

Find a version

55 CVEs

Sort

Multi Factor Auth Bypass
CVE-2026-3183
Patch
CWE-290
High · CVSS 7.1
EPSS 0.5% (39th pct)2026-07-21
Account Takeover via Predictable SSO Ticket Generation
CVE-2026-11374
Patch
CWE-340
Critical · CVSS 9.0
EPSS 2.0% (78th pct)2026-06-23
Remote Code Execution
CVE-2026-2740
Patch
CWE-77
High · CVSS 8.4
EPSS 1.7% (75th pct)2026-05-21
SQL Injection
CVE-2026-1367
Patch
CWE-89
High · CVSS 8.3
EPSS 7.4% (94th pct)2026-02-23
Authentication Bypass
CVE-2025-11250
Patch
CWE-290
Critical · CVSS 9.1
EPSS 1.4% (70th pct)2026-01-13
SQL Injection
CVE-2025-3833
Patch
CWE-89
High · CVSS 8.1
EPSS 33.7% (98th pct)2025-05-14
Account takeover
CVE-2025-1723
Patch
CWE-287
High · CVSS 8.1
EPSS 1.4% (70th pct)2025-03-03
Medium vulnerability · 2024-05-27
CVE-2024-27310
Patch
CWE-90
Medium · CVSS 6.5
EPSS 2.3% (81th pct)2024-05-27
Remote code execution
CVE-2024-0252
Patch
CWE-94
High · CVSS 8.8
EPSS 7.8% (94th pct)2024-01-11
Medium vulnerability · 2023-11-15
CVE-2023-6105
Patch
CWE-200
Medium · CVSS 5.5
EPSS 0.7% (49th pct)2023-11-15
Medium vulnerability · 2023-09-06
CVE-2023-35719CWE-345
Medium · CVSS 6.8
EPSS 26.4% (98th pct)2023-09-06
Critical vulnerability · 2023-06-20
CVE-2023-35854
Public exploit
Patch
Critical · CVSS 9.8
EPSS 6.0% (93th pct)2023-06-20
High vulnerability · 2023-04-05
CVE-2023-28342CWE-400
High · CVSS 7.5
EPSS 79.7% (100th pct)2023-04-05
Critical vulnerability · 2023-03-23
CVE-2022-36413
Patch
Critical · CVSS 9.1
EPSS 3.1% (86th pct)2023-03-23
Critical vulnerability · 2023-01-18
CVE-2022-47966
CISA KEV
Public exploit
Patch
CWE-20
Added to CISA KEV 2023-01-23
Critical · CVSS 9.3
EPSS 99.8% (100th pct)2023-01-18
High vulnerability · 2022-07-04
CVE-2022-34829
Patch
High · CVSS 7.5
EPSS 3.9% (89th pct)2022-07-04
Medium vulnerability · 2022-05-20
CVE-2022-28987
Medium · CVSS 5.3
EPSS 9.9% (95th pct)2022-05-20
High vulnerability · 2022-04-18
CVE-2022-29457
Public exploit
Patch
High · CVSS 8.8
EPSS 7.9% (94th pct)2022-04-18
Medium vulnerability · 2022-04-18
CVE-2022-28810
CISA KEV
Public exploit
Patch
CWE-798
Added to CISA KEV 2023-03-07
Medium · CVSS 6.8
EPSS 71.0% (99th pct)2022-04-18
Medium vulnerability · 2022-04-07
CVE-2022-24681
Patch
Medium · CVSS 6.1
EPSS 3.6% (88th pct)2022-04-07
Medium vulnerability · 2022-01-03
CVE-2021-20148
Medium · CVSS 4.3
EPSS 1.1% (63th pct)2022-01-03
Medium vulnerability · 2022-01-03
CVE-2021-20147
Medium · CVSS 5.3
EPSS 6.9% (93th pct)2022-01-03
Critical vulnerability · 2021-09-10
CVE-2021-37422
Patch
Critical · CVSS 9.8
EPSS 3.4% (88th pct)2021-09-10
Critical vulnerability · 2021-09-10
CVE-2021-37423
Patch
Critical · CVSS 9.8
EPSS 2.8% (85th pct)2021-09-10
Critical vulnerability · 2021-09-07
CVE-2021-40539
CISA KEV
Public exploit
Patch
CWE-706
Added to CISA KEV 2021-11-03
Critical · CVSS 9.3
EPSS 99.0% (100th pct)2021-09-07
Critical vulnerability · 2021-08-30
CVE-2021-37421
Patch
Critical · CVSS 9.8
EPSS 2.5% (83th pct)2021-08-30
Critical vulnerability · 2021-08-30
CVE-2021-37417
Patch
Critical · CVSS 9.8
EPSS 4.8% (91th pct)2021-08-30
Medium vulnerability · 2021-08-30
CVE-2021-37416
Patch
Medium · CVSS 6.1
EPSS 2.9% (86th pct)2021-08-30
Critical vulnerability · 2021-08-30
CVE-2021-33055
Patch
Critical · CVSS 9.8
EPSS 18.1% (97th pct)2021-08-30
High vulnerability · 2021-08-09
CVE-2021-33256
Public exploit
High · CVSS 8.8
EPSS 79.0% (100th pct)2021-08-09

Showing 30 of 55

zohocorp manageengine adselfservice plus Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other zohocorp products

Frequently asked questions

References

Track zohocorp manageengine adselfservice plus vulnerabilities