What’s Vulnerable › Vulnerabilities

CVE-2019-12876

• Severity: high (CVSS 7.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-07-17 · updated 2026-06-17
• Weakness: CWE-732

Description

Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to System.

Affected products

• Zohocorp ManageEngine ADManager Plus: 6.6.5
• ManageEngine ADSelfService Plus: 5.7
• ManageEngine Desktop Central: 10.0.380

References

• http://www.securityfocus.com/bid/109298
• https://www.criticalstart.com/2019/07/manageengine-privilege-escalation/
• http://www.securityfocus.com/bid/109298
• https://www.criticalstart.com/2019/07/manageengine-privilege-escalation/

Get alerted when CVE-2019-12876 or the next vulnerability affects your stack