CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2019-7161
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.
Severity
- EPSS
- 5.6% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- CWE
- CWE-798
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zohocorp:manageengine_adselfservice_plus
References
- https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-7161
- https://www.excellium-services.com/cert-xlm-advisory
- https://www.excellium-services.com/cert-xlm-advisory/cve-2019-7161/
- https://www.manageengine.com/products/self-service-password/release-notes.html
- https://www.excellium-services.com/cert-xlm-advisory/cve-2019-7161/