CVE-2019-12876: Zohocorp ManageEngine Admanager Plus

High severity, CVSS 7.3. EPSS: 4.6% chance of exploitation in the next 30 days.

Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to System.

Affected products

• Zohocorp ManageEngine Admanager Plus: version 6.6.5 only
• Zohocorp ManageEngine Adselfservice Plus: version 5.7 only
• Zohocorp ManageEngine Desktop Central: version 10.0.380 only

Published 2019-07-17. Last modified 2026-06-17.