CVE-2025-5342

MEDIUM WAF: Medium
CVSS 6.5 Published: 2025-10-30
CWE-400

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module.

WAF Coverage Analysis

Uncontrolled Resource Consumption Medium WAF Coverage

OWASP: A05:2021 Security Misconfiguration

912xxx - DOS Protection

Affected Software

VendorProductVersion
zohocorpmanageengine_exchange_reporter_plusup to 5.7
zohocorpmanageengine_exchange_reporter_plus5.7
zohocorpmanageengine_exchange_reporter_plus5.7
zohocorpmanageengine_exchange_reporter_plus5.7
zohocorpmanageengine_exchange_reporter_plus5.7
zohocorpmanageengine_exchange_reporter_plus5.7
zohocorpmanageengine_exchange_reporter_plus5.7
zohocorpmanageengine_exchange_reporter_plus5.7
zohocorpmanageengine_exchange_reporter_plus5.7
zohocorpmanageengine_exchange_reporter_plus5.7

References

Back to CVE Database