ME
Product
ManageEngine Exchange Reporter Plus
by Zohocorp · last CVE Apr 3, 2026
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 10Medium 16Low 0
Watch

Add ManageEngine Exchange Reporter Plus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-9459
8.8
4%
Nov 5
SQL Injection
Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +14 more
CVE-2024-38872
8.8
3%
Jul 26
SQL Injection
Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +12 more
CVE-2024-38871
8.8
3%
Jul 26
SQL Injection
Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +12 more
CVE-2024-21775
8.8
5%
Feb 16
SQL Injection
Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +11 more
CVE-2022-29457
8.8
8%
Apr 18
Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path…
Affected: before 5.7; 5.7; 5.7
CVE-2025-5966
8.1
1%
Jun 26
Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report.
Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +18 more
CVE-2025-5366
8.1
1%
Jun 26
Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Folder-wise read mails with subject report.
Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +18 more
CVE-2024-6204
8.1
2%
Aug 30
SQL injection
Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +11 more
CVE-2023-35785
8.1
2%
Aug 28
Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below,…
Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +5 more
CVE-2023-22624
7.5
3%
Jan 17
Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks
Affected: before 5.7; 5.7; 5.7; 5.7; 5.7; 5.7; +3 more
Showing 10