Vulnerabilities > CVE-2024-27310 - Unspecified vulnerability in Zohocorp Manageengine Adselfservice Plus

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

LOW

network

low complexity

NVD

Published: 2024-05-27

Updated: 2024-11-27

Summary

Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input.

Part	Description	Count
Application	Zohocorp Zohocorp Manageengine Adselfservice Plus 6.4 Zohocorp Manageengine Adselfservice Plus 4.5 Zohocorp Manageengine Adselfservice Plus 5.0 Zohocorp Manageengine Adselfservice Plus 5.0.6 Zohocorp Manageengine Adselfservice Plus 5.1 Zohocorp Manageengine Adselfservice Plus 5.2 Zohocorp Manageengine Adselfservice Plus 5.3 Zohocorp Manageengine Adselfservice Plus 5.4 Zohocorp Manageengine Adselfservice Plus 5.5 Zohocorp Manageengine Adselfservice Plus 5.6 Zohocorp Manageengine Adselfservice Plus 5.7 Zohocorp Manageengine Adselfservice Plus 5.8 Zohocorp Manageengine Adselfservice Plus 6.0 Zohocorp Manageengine Adselfservice Plus 6.1 Zohocorp Manageengine Adselfservice Plus 6.2 Zohocorp Manageengine Adselfservice Plus 6.3	220