What’s Vulnerable › Products

Zohocorp ManageEngine Exchange Reporter Plus vulnerabilities

28 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 19 published in the last 12 months.

Check whether your Zohocorp ManageEngine Exchange Reporter Plus version is affected

Latest Zohocorp ManageEngine Exchange Reporter Plus vulnerabilities

• CVE-2026-27655 — Stored XSS Vulnerability (CVSS 4.8)
• CVE-2026-4108 — Stored XSS Vulnerability (CVSS 4.8)
• CVE-2026-4107 — Stored XSS Vulnerability (CVSS 5.4)
• CVE-2026-3880 — Stored XSS Vulnerability (CVSS 4.8)
• CVE-2026-3879 — Stored XSS Vulnerability (CVSS 4.8)
• CVE-2026-28703 — Stored XSS Vulnerability (CVSS 4.8)
• CVE-2026-28756 — Stored XSS Vulnerability (CVSS 4.8)
• CVE-2026-28754 — Stored XSS Vulnerability (CVSS 4.8)
• CVE-2025-7633 — Stored XSS (CVSS 6.1)
• CVE-2025-7632 — Stored XSS (CVSS 5.4)
• CVE-2025-7430 — Stored XSS (CVSS 5.4)
• CVE-2025-7429 — Stored XSS (CVSS 5.4)
• CVE-2025-5347 — Stored XSS (CVSS 5.4)
• CVE-2025-5343 — Stored XSS (CVSS 5.4)
• CVE-2025-5342 — Denial of Service (DoS) (CVSS 6.5)
• CVE-2025-5966 — Stored XSS (CVSS 8.1)
• CVE-2025-5366 — Stored XSS (CVSS 8.1)
• CVE-2025-3835 — Remote Code Execution (CVSS 9.6)
• CVE-2024-9459 — SQL Injection (CVSS 8.8)
• CVE-2024-6204 — SQL injection (CVSS 8.1)
• CVE-2024-38872 — SQL Injection (CVSS 8.8)
• CVE-2024-38871 — SQL Injection (CVSS 8.8)
• CVE-2024-21775 — SQL Injection (CVSS 8.8)
• CVE-2023-6105 — ManageEngine Information Disclosure in Multiple Products (CVSS 5.5)
• CVE-2023-35785 — (CVSS 8.1)