ManageEngine Exchange Reporter Plus
Moderate fix1 remedy
cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 5721
ManageEngine Exchange Reporter Plus Remote Code Execution Vulnerability
Vulnerability
Patched
A remote code execution vulnerability has been identified in ManageEngine Exchange Reporter Plus, affecting versions through 5721. The issue arises in the Content Search module, allowing attackers to execute arbitrary commands on the server.
Impact
Exploitation of this vulnerability allows for remote code execution on the affected server.
Remediation
Users are advised to update Exchange Reporter Plus to version 5722 or later. The latest service pack can be downloaded from the ManageEngine website. For assistance, contact ManageEngine product support.
Added: Jun 9, 2025, 11:20 AM
Updated: Jun 9, 2025, 12:22 PM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
10.0exploitability
6.0remediation
7.7relevance
0.2threat
0.1urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.