← Back to CVEs
CVE-2025-7632
HIGH7.3
Description
Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Public Folders report.
CVE Details
CVSS v3.1 Score7.3
SeverityHIGH
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredLOW
User InteractionREQUIRED
Published11/11/2025
Last Modified11/21/2025
Sourcenvd
Honeypot Sightings0
Affected Products
zohocorp:manageengine_exchange_reporter_plus
Weaknesses (CWE)
CWE-79
References
https://www.manageengine.com/products/exchange-reports/advisory/CVE-2025-7632.html(0fc0942c-577d-436f-ae8e-945763c79b02)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.