Read the docs
TI-2025-06966 Aliases CVE-2025-7632GHSA-596r-563g-p8ff

Stored XSS in Zohocorp ManageEngine Exchange Reporter Plus

Priority LOW 35CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Public Folders report.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00524 44th percentileScored 2026-11-07
Fix Fixed ManageEngine Exchange Reporter Plus (Zohocorp): 5724

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ZohocorpManageEngine Exchange Reporter Plusbefore 57245724Patch availableCNA
  • ManageEngine Exchange Reporter Plus VendorZohocorp Affected before 5724 Fixed in 5724 Patch available CNA

CPE configurations NVD · 25

CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:*:*:*:*:*:*:*:*up to 5.6VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:-:*:*:*:*:*:*5.7VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5700:*:*:*:*:*:*5.7 5700VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5701:*:*:*:*:*:*5.7 5701VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5702:*:*:*:*:*:*5.7 5702VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5703:*:*:*:*:*:*5.7 5703VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5704:*:*:*:*:*:*5.7 5704VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5705:*:*:*:*:*:*5.7 5705VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5706:*:*:*:*:*:*5.7 5706VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5707:*:*:*:*:*:*5.7 5707VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:*:*:*:*:*:*:*:* Versions up to 5.6 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:-:*:*:*:*:*:* Versions 5.7 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5700:*:*:*:*:*:* Versions 5.7 5700 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5701:*:*:*:*:*:* Versions 5.7 5701 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5702:*:*:*:*:*:* Versions 5.7 5702 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5703:*:*:*:*:*:* Versions 5.7 5703 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5704:*:*:*:*:*:* Versions 5.7 5704 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5705:*:*:*:*:*:* Versions 5.7 5705 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5706:*:*:*:*:*:* Versions 5.7 5706 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5707:*:*:*:*:*:* Versions 5.7 5707 Vulnerable ·Zohocorp
Show 15 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5708:*:*:*:*:*:*5.7 5708VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5709:*:*:*:*:*:*5.7 5709VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5710:*:*:*:*:*:*5.7 5710VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5711:*:*:*:*:*:*5.7 5711VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5712:*:*:*:*:*:*5.7 5712VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5713:*:*:*:*:*:*5.7 5713VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5714:*:*:*:*:*:*5.7 5714VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5715:*:*:*:*:*:*5.7 5715VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5717:*:*:*:*:*:*5.7 5717VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5718:*:*:*:*:*:*5.7 5718VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5719:*:*:*:*:*:*5.7 5719VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5720:*:*:*:*:*:*5.7 5720VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5721:*:*:*:*:*:*5.7 5721VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5722:*:*:*:*:*:*5.7 5722VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5723:*:*:*:*:*:*5.7 5723VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5708:*:*:*:*:*:* Versions 5.7 5708 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5709:*:*:*:*:*:* Versions 5.7 5709 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5710:*:*:*:*:*:* Versions 5.7 5710 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5711:*:*:*:*:*:* Versions 5.7 5711 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5712:*:*:*:*:*:* Versions 5.7 5712 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5713:*:*:*:*:*:* Versions 5.7 5713 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5714:*:*:*:*:*:* Versions 5.7 5714 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5715:*:*:*:*:*:* Versions 5.7 5715 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5717:*:*:*:*:*:* Versions 5.7 5717 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5718:*:*:*:*:*:* Versions 5.7 5718 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5719:*:*:*:*:*:* Versions 5.7 5719 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5720:*:*:*:*:*:* Versions 5.7 5720 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5721:*:*:*:*:*:* Versions 5.7 5721 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5722:*:*:*:*:*:* Versions 5.7 5722 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5723:*:*:*:*:*:* Versions 5.7 5723 Vulnerable ·Zohocorp

Remediation

  • Fix · CNA ManageEngine Exchange Reporter Plus (Zohocorp) Fixed in 5724

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Zohocorp ManageEngine Exchange Reporter Plus 5724

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2025-06967 Stored XSS in Zohocorp ManageEngine Exchange Reporter PlusPriority LOW 35
    • TI-2025-06770 Stored XSS in Zohocorp ManageEngine Exchange Reporter PlusPriority LOW 35
    • TI-2025-06769 Stored XSS in Zohocorp ManageEngine Exchange Reporter PlusPriority LOW 35
    Show all 4 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-7632
  2. 2026-10-03 Alias added: GHSA-596r-563g-p8ff

References

Advisory 1

  • TI-2020-15194 An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number… CVSS 3.1CRITICAL 9.8
  • TI-2022-11926 Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter… CVSS 3.1HIGH 8.8
  • TI-2024-14459 SQL injection in ManageEngine Exchange Reporter Plus CVSS 3.1HIGH 8.8
  • TI-2025-03385 Remote code execution in ManageEngine Exchange Reporter Plus CVSS 3.1CRITICAL 9.6
  • TI-2024-08778 SQL injection in ManageEngine Exchange Reporter Plus CVSS 3.1HIGH 8.8
  • TI-2024-26078 SQL injection in ManageEngine Exchange Reporter Plus CVSS 3.1HIGH 8.8
See all 27 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences