5.4

CVE-2025-7632

Stored XSS

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Public Folders report.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5700
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5701
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5702
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5703
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5704
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5705
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5706
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5707
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5708
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5709
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5710
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5711
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5712
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5713
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5714
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5715
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5717
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5718
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5719
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5720
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5721
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5722
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5723
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.395
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.4 2.3 2.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0fc0942c-577d-436f-ae8e-945763c79b02 7.3 2.1 5.2
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://www.manageengine.com/products/exchange-reports/advisory/CVE-2025-7632.html
Vendor Advisory