ManageEngine ADSelfService Plus
Moderate fix1 remedy
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 6510
ManageEngine ADSelfService Plus Account Takeover Vulnerability
Vulnerability
Patched
A session mishandling vulnerability in ManageEngine ADSelfService Plus versions through 6510 allows valid account holders to exploit the issue, leading to unauthorized access to user enrollment data. This vulnerability could result in account takeovers, especially when multi-factor authentication (MFA) is not enabled for ADSelfService Plus login.
Impact
Exploitation of this vulnerability could allow for unauthorized access to user accounts, potentially leading to account takeovers.
Remediation
Users can update to ManageEngine ADSelfService Plus version 6511 or later to address this vulnerability. Instructions for updating are available on the ManageEngine website.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.8impact
5.0exploitability
5.2remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.