Manageengine Exchange Reporter Plus

manageengine_exchange_reporter_plus

Vendor: Zohocorp • 28 CVEs

CVEs (28)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-27655 1Zohocorp 1Manageengine Exchange Reporter Plus Jul 20, 2026 Apr 3, 2026 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report.
CVE-2026-4108 1Zohocorp 1Manageengine Exchange Reporter Plus Jul 24, 2026 Apr 3, 2026 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Permission report.
CVE-2026-4107 1Zohocorp 1Manageengine Exchange Reporter Plus Jul 24, 2026 Apr 3, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count and Size report.
CVE-2026-3880 1Zohocorp 1Manageengine Exchange Reporter Plus Jul 24, 2026 Apr 3, 2026 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report.
CVE-2026-3879 1Zohocorp 1Manageengine Exchange Reporter Plus Jul 24, 2026 Apr 3, 2026 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Equipment Mailbox Details report.
CVE-2026-28703 1Zohocorp 1Manageengine Exchange Reporter Plus Jul 24, 2026 Apr 3, 2026 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Mails Exchanged Between Users report.
CVE-2026-28756 1Zohocorp 1Manageengine Exchange Reporter Plus Jul 24, 2026 Apr 3, 2026 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report.
CVE-2026-28754 1Zohocorp 1Manageengine Exchange Reporter Plus Jul 24, 2026 Apr 3, 2026 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists report.
CVE-2025-7633 1Zohocorp 1Manageengine Exchange Reporter Plus Jun 17, 2026 Nov 11, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Custom report.
CVE-2025-7632 1Zohocorp 1Manageengine Exchange Reporter Plus Jun 17, 2026 Nov 11, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Public Folders report.
CVE-2025-7430 1Zohocorp 1Manageengine Exchange Reporter Plus Jun 17, 2026 Nov 11, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Folder Message Count and Size report.
CVE-2025-7429 1Zohocorp 1Manageengine Exchange Reporter Plus Jun 17, 2026 Nov 11, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Mails Deleted or Moved report.
CVE-2025-5347 1Zohocorp 1Manageengine Exchange Reporter Plus Jun 17, 2026 Oct 30, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module.
CVE-2025-5343 1Zohocorp 1Manageengine Exchange Reporter Plus Jun 17, 2026 Oct 30, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option.
CVE-2025-5342 1Zohocorp 1Manageengine Exchange Reporter Plus Jun 17, 2026 Oct 30, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module.
CVE-2025-5966 1Zohocorp 1Manageengine Exchange Reporter Plus Jun 17, 2026 Jun 26, 2025 N/A· v4 8.1 HIGH· v3 N/A· v2 Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report.
CVE-2025-5366 1Zohocorp 1Manageengine Exchange Reporter Plus Jun 17, 2026 Jun 26, 2025 N/A· v4 8.1 HIGH· v3 N/A· v2 Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Folder-wise read mails with subject report.
CVE-2025-3835 1Zohocorp 1Manageengine Exchange Reporter Plus Jun 17, 2026 Jun 9, 2025 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module.
CVE-2024-9459 1Zohocorp 1Manageengine Exchange Reporter Plus Jun 17, 2026 Nov 5, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module.
CVE-2024-6204 1Zohocorp 1Manageengine Exchange Reporter Plus Jun 17, 2026 Aug 30, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module.

12 Next