Zoho (ManageEngine) · weakness class

Denial of Service

4 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Connect AI

likely to be exploited: 2

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API.CVE-2023-28342Zohocorp · CVSS 7.5 · 78% likely
CWE-400
Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service (DoS…CVE-2023-26601Zohocorp · 34% likely
CWE-400
Manage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS from Manage Engine Server. The HTTPS certificates are not verified which allows any…CVE-2021-20108Zohocorp · 4.5% likely
CWE-401
Denial of Service (DoS)CVE-2025-5342Zohocorp · CVSS 4.3 · 1.1% likely
CWE-400

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.