ME
Product
ManageEngine Exchange Reporter Plus
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 10Medium 16Low 0
Watch
Add ManageEngine Exchange Reporter Plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-24786 | 9.8 | Aug 31 | An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817,… Affected: through 5.4; 5.5; 5.5; 5.5; 5.5; 5.5 |
| CVE-2025-3835 | 9.6 | Jun 9 | Remote Code Execution Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +17 more |
| CVE-2024-9459 | 8.8 | Nov 5 | SQL Injection Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +14 more |
| CVE-2024-38872 | 8.8 | Jul 26 | SQL Injection Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +12 more |
| CVE-2024-38871 | 8.8 | Jul 26 | SQL Injection Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +12 more |
| CVE-2024-21775 | 8.8 | Feb 16 | SQL Injection Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +11 more |
| CVE-2022-29457 | 8.8 | Apr 18 | Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path… Affected: before 5.7; 5.7; 5.7 |
| CVE-2025-5966 | 8.1 | Jun 26 | Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report. Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +18 more |
| CVE-2025-5366 | 8.1 | Jun 26 | Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Folder-wise read mails with subject report. Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +18 more |
| CVE-2024-6204 | 8.1 | Aug 30 | SQL injection Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +11 more |
| CVE-2023-35785 | 8.1 | Aug 28 | Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below,… Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +5 more |
| CVE-2023-22624 | 7.5 | Jan 17 | Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +3 more |
| CVE-2025-5342 | 6.5 | Oct 30 | Denial of Service (DoS) Affected: through 5721 |
| CVE-2025-7633 | 6.1 | Nov 11 | Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Custom report. Affected: before 5724 |
| CVE-2023-6105 | 5.5 | Nov 15 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +8 more |
| CVE-2026-4107 | 5.4 | Apr 3 | Stored XSS Vulnerability Affected: before 5802 |
| CVE-2025-7632 | 5.4 | Nov 11 | Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Public Folders report. Affected: before 5724 |
| CVE-2025-7430 | 5.4 | Nov 11 | Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Folder Message Count and Size report. Affected: before 5724 |
| CVE-2025-7429 | 5.4 | Nov 11 | Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Mails Deleted or Moved report. Affected: before 5724 |
| CVE-2025-5347 | 5.4 | Oct 30 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module. Affected: before 5723 |
| CVE-2025-5343 | 5.4 | Oct 30 | Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option. Affected: through 5721 |
| CVE-2026-27655 | 4.8 | Apr 3 | Stored XSS Vulnerability Affected: before 5802 |
| CVE-2026-4108 | 4.8 | Apr 3 | Stored XSS Vulnerability Affected: before 5802 |
| CVE-2026-3880 | 4.8 | Apr 3 | Stored XSS Vulnerability Affected: before 5802 |
| CVE-2026-3879 | 4.8 | Apr 3 | Stored XSS Vulnerability Affected: before 5802 |
| CVE-2026-28703 | 4.8 | Apr 3 | Stored XSS Vulnerability Affected: before 5802 |
| CVE-2026-28756 | 4.8 | Apr 3 | Stored XSS Vulnerability Affected: before 5802 |
| CVE-2026-28754 | 4.8 | Apr 3 | Stored XSS Vulnerability Affected: before 5802 |
Showing 28