CVE-2024-27310

Description

References

• manageengine.com/products/self-service-password/advisory/CVE-2024-27310.html · Vendor Advisory

Weitere Schwachstellen in manageengine adselfservice plus

• CVE-2025-11250KRITISCH 9.1Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations.
• CVE-2025-3833HOCH 8.1Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports.
• CVE-2025-1723HOCH 8.1Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid ac…
• CVE-2024-0252HOCH 8.8ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load…
• CVE-2023-6105MITTEL 5.5An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-pri…