Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-27310

Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input.

Published

2024-05-27T18:15:09.693

Last Modified

2024-11-27T16:25:10.307

Status

Analyzed

Source

0fc0942c-577d-436f-ae8e-945763c79b02

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-90
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application zohocorp manageengine_adselfservice_plus < 6.4 Yes
Application zohocorp manageengine_adselfservice_plus 6.4 Yes
References