Zohocorp Manageengine Exchange Reporter Plus vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Zohocorp Manageengine Exchange Reporter Plus: 15 record(s), with affected versions and fixes.cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus
CVE-2026-27655
Medium · 4.8
CWE-79 Apr 3, 2026
Stored XSS Vulnerability
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report.
CVE-2026-4108
Medium · 4.8
CWE-79 Apr 3, 2026
Stored XSS Vulnerability
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Permission report.
CVE-2026-4107
Medium · 5.4
CWE-79 Apr 3, 2026
Stored XSS Vulnerability
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count and Size report.
CVE-2026-3880
Medium · 4.8
CWE-79 Apr 3, 2026
Stored XSS Vulnerability
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report.
CVE-2026-3879
Medium · 4.8
CWE-79 Apr 3, 2026
Stored XSS Vulnerability
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Equipment Mailbox Details report.
CVE-2026-28703
Medium · 4.8
CWE-79 Apr 3, 2026
Stored XSS Vulnerability
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Mails Exchanged Between Users report.
CVE-2026-28756
Medium · 4.8
CWE-79 Apr 3, 2026
Stored XSS Vulnerability
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report.
CVE-2026-28754
Medium · 4.8
CWE-79 Apr 3, 2026
Stored XSS Vulnerability
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists report.
CVE-2025-7633
Medium · 6.1
CWE-79 Nov 11, 2025
Stored XSS
Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Custom report.
CVE-2025-7632
Medium · 5.4
CWE-79 Nov 11, 2025
Stored XSS
Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Public Folders report.
CVE-2025-7430
Medium · 5.4
CWE-79 Nov 11, 2025
Stored XSS
Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Folder Message Count and Size report.
CVE-2025-7429
Medium · 5.4
CWE-79 Nov 11, 2025
Stored XSS
Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Mails Deleted or Moved report.
CVE-2025-5347
Medium · 5.4
CWE-79 Oct 30, 2025
Stored XSS
Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module.
CVE-2025-5343
Medium · 5.4
CWE-79 Oct 30, 2025
Stored XSS
Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option.
CVE-2025-5342
Medium · 6.5
CWE-1333 Oct 30, 2025
Denial of Service (DoS)
Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module.