CVE-2019-11511: Zohocorp ManageEngine Adselfservice Plus

Medium severity, CVSS 6.1. EPSS: 2.1% chance of exploitation in the next 30 days.

Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API.

Affected products

• Zohocorp ManageEngine Adselfservice Plus: version 5.7 only

Published 2019-04-25. Last modified 2026-06-17.