VULNERABILITY INTELLIGENCE
CVE-2025-5343
CVSS score6.3 MEDIUM
EPSS probability0.45%
CISA KEVNot currently listed
Published2025-10-30
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
Description
Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option.
Weakness classification
- 0fc0942c-577d-436f-ae8e-945763c79b02: CWE-79
Primary references
- 0fc0942c-577d-436f-ae8e-945763c79b02 — Vendor Advisory