CVE-2019-7161

Published 18 Mar 2019 · Updated 30 May 2025

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.6%

An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.

Affected products

n/a · n/a

References

https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-7161 https://www.excellium-services.com/cert-xlm-advisory https://www.excellium-services.com/cert-xlm-advisory/cve-2019-7161/https://www.manageengine.com/products/self-service-password/release-notes.html