CVE-2020-11518

Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to 5815

Description The issue allows unauthenticated remote code execution. There have been reports of real-world incidents where this issue was exploited, including a case where an individual bruteforced their way into an Active Directory.

Recommendations For versions prior to 5815, update to version 5815 or later to resolve the issue. As a temporary workaround, consider restricting access to the application to minimize the risk of exploitation.