Zoho ManageEngine ADSelfService Plus prior to 6112 is vulnerable to SSRF.
zohocorp manageengine admanager plus
zohocorp manageengine admanager plus 6.1