6.5

CVE-2025-5342

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5700
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5701
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5702
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5703
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5704
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5705
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5706
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5707
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5708
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5709
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5710
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5711
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5712
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5713
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5714
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5715
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5717
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5718
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5719
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5720
Zohocorp ≫ Manageengine Exchange Reporter Plus Version5.7 Update5721
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.08% 0.238
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0fc0942c-577d-436f-ae8e-945763c79b02 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-1333 Inefficient Regular Expression Complexity

The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.