CVE-2025-5342
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD
Description
Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module.
Affected (23)
Products: Zohocorp: Manageengine Exchange Reporter Plus
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 5.7 |
Related CWEs
CWE-1333
Inefficient Regular Expression Complexity
The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.
CWE-400
Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
References (1)
Source: 0fc0942c-577d-436f-ae8e-945763c79b02
Vendor Advisory
Timeline
No history available yet.