CVE-2024-0252

8.8 highEPSS 7.8%

High (8.8) in zohocorp manageengine adselfservice plus. EPSS 7.8% chance of exploitation in the next 30 days.

ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load balancer component. Authentication is required in order to exploit this vulnerability.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 7.8% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2024-01-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zohocorp:manageengine_adselfservice_plus

References

https://www.manageengine.com/products/self-service-password/advisory/CVE-2024-0252.html
https://www.manageengine.com/products/self-service-password/advisory/CVE-2024-0252.html

Check your stack JSON