Vulnerability · Published May 27, 2024 · Assigned by ManageEngine
CVE-2024-27310DOS Vulnerability
Medium 5.3
In plain English
A medium-severity security flaw in ADSelfService Plus from ManageEngine. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 83% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)2.3%top 16.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ManageEngine | ADSelfService Plus | 0 – before 6401 |
Weakness: CWE-90 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L