9.6

CVE-2025-3835

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module.

Data is provided by the National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5700
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5701
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5702
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5703
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5704
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5705
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5706
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5707
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5708
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5709
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5710
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5711
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5712
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5713
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5714
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5715
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5717
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5718
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5719
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5720
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5721
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.09% 0.262
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
0fc0942c-577d-436f-ae8e-945763c79b02 9.6 2.8 6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.