CVE-2024-27310: Zohocorp ManageEngine Adselfservice Plus

Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input.

Affected products

• Zohocorp ManageEngine Adselfservice Plus: before 6.4 (fixed in 6.4); version 6.4 only

Published 2024-05-27. Last modified 2026-06-17.