# Zohocorp Manageengine Adselfservice Plus


- [CVE-2022-47966](https://insights.sbomify.com/CVE-2022-47966/): Zoho ManageEngine Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-40539](https://insights.sbomify.com/CVE-2021-40539/): Zoho ManageEngine ADSelfService Plus Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2022-28810](https://insights.sbomify.com/CVE-2022-28810/): Zoho ManageEngine ADSelfService Plus Remote Code Execution (medium 6.8, exploited in the wild)
- [CVE-2019-3905](https://insights.sbomify.com/CVE-2019-3905/): Server-side request forgery in n/a (critical 10.0)
- [CVE-2023-35854](https://insights.sbomify.com/CVE-2023-35854/): Auth bypass in n/a (critical 9.8)
- [CVE-2021-37422](https://insights.sbomify.com/CVE-2021-37422/): SQL injection in n/a (critical 9.8)
- [CVE-2021-37423](https://insights.sbomify.com/CVE-2021-37423/): Auth bypass in n/a (critical 9.8)
- [CVE-2021-33055](https://insights.sbomify.com/CVE-2021-33055/): Command injection in n/a (critical 9.8)
- [CVE-2021-37417](https://insights.sbomify.com/CVE-2021-37417/): Security feature bypass in n/a (critical 9.8)
- [CVE-2021-37421](https://insights.sbomify.com/CVE-2021-37421/): Auth bypass in n/a (critical 9.8)
- [CVE-2021-28958](https://insights.sbomify.com/CVE-2021-28958/): Command injection in n/a (critical 9.8)
- [CVE-2018-5353](https://insights.sbomify.com/CVE-2018-5353/): Auth bypass in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/zohocorp/manageengine-adselfservice-plus/