CVE-2025-7633

EPSS 0.49%
Veröffentlicht 11.11.2025 10:32:01
Zuletzt bearbeitet 24.11.2025 15:43:26
Erkennungen
Login

Stored XSS

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Custom report.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 25 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Zohocorp ≫ Manageengine Exchange Reporter Plus Version <= 5.6

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update -

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5700

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5701

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5702

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5703

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5704

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5705

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5706

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5707

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5708

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5709

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5710

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5711

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5712

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5713

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5714

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5715

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5717

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5718

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5719

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5720

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5721

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5722

Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5723

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.49%	0.398

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.1	2.8	2.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0fc0942c-577d-436f-ae8e-945763c79b02	7.3	2.1	5.2	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://www.manageengine.com/products/exchange-reports/advisory/CVE-2025-7633.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-7633

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-7633

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-7633

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-7633