CVE-2021-31874

5.9 mediumEPSS 4.3%

Medium (5.9) in zohocorp manageengine adselfservice plus. EPSS 4.3% chance of exploitation in the next 30 days.

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application.

Severity

CVSS 3.1

5.9 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
Published: 2021-07-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zohocorp:manageengine_adselfservice_plus

References

https://blog.stmcyber.com/vulns/cve-2021-31874/
https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6104-released-with-an-important-security-fixes
https://blog.stmcyber.com/vulns/cve-2021-31874/
https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6104-released-with-an-important-security-fixes

Check your stack JSON