CVE-2018-20664: Zohocorp ManageEngine Adselfservice Plus

Critical severity, CVSS 9.8. EPSS: 8.1% chance of exploitation in the next 30 days.

Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.

Affected products

• Zohocorp ManageEngine Adselfservice Plus: version 5.7 only

Published 2019-01-03. Last modified 2026-06-17.