What’s Vulnerable › Vulnerabilities

CVE-2020-11518

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 19.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-04 · updated 2026-06-17

Description

Zoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution.

Affected products

• ManageEngine ADSelfService Plus: through 5.7; 5.8, 5.8-5800, 5.8-5801, 5.8-5802, 5.8-5803, 5.8-5804 (+10)

References

• https://pitstop.manageengine.com/portal/community/topic/adselfservice-plus-5815-released-with-an-important-security-fix
• https://pitstop.manageengine.com/portal/community/topic/adselfservice-plus-5815-released-with-an-important-security-fix

Get alerted when CVE-2020-11518 or the next vulnerability affects your stack