CVE-2021-40539

CRITICAL CVSS: 9.8 Published: 2021-09-07 Modified: 2026-06-17

Description

Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution.

Affected Platforms

Zohocorp Manageengine Adselfservice Plus

Weakness Type

CWE-706, CWE-706

References