PT-2025-46319 · Zohocorp · Zoho Manageengine Exchange Reporter Plus
CVE-2025-7632
·
Published
2025-07-25
·
Updated
2025-11-21
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below
Description
The software is susceptible to a Stored Cross-Site Scripting (XSS) issue within the Public Folders report functionality. This allows for the injection of malicious scripts that can be stored and subsequently executed when other users access the affected report.
Recommendations
Update Zohocorp ManageEngine Exchange Reporter Plus to a version higher than 5723.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Zoho Manageengine Exchange Reporter Plus