VDB
BDU%3A2021-05099
BDU%3A2021-05099
PUBLISHED
CVSS 7.5 HIGH
Уязвимость программного обеспечения для сброса паролей ManageEngine ADSelfService Plus , связанная с отсутствием процедуры аутентификации, позволяющая нарушителю обойти процедуру аутентификации
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ZOHO Corp. | ManageEngine ADSelfService Plus |
Timeline
- Sep 20, 2021 PoC Published
- Sep 23, 2021 PoC Published
- Oct 21, 2021 CVE Published
- Mar 1, 2024 PoC Published
- Sep 24, 2024 CVE Updated
- May 9, 2025 PoC Published
- Sep 30, 2025 PoC Published
- Oct 29, 2025 PoC Published
- Dec 18, 2025 PoC Published
- Feb 13, 2026 PoC Published
References
- http://packetstormsecurity.com/files/165085/ManageEngine-ADSelfService-Plus-Authentication-Bypass-Code-Execution.html url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url
- https://www.manageengine.com/products/self-service-password/kb/how-to-fix-authentication-bypass-vulnerability-in-REST-API.html advisory
- https://www.manageengine.com advisory