CVE-2025-3835

EUVD-2025-17446
Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.6 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
ZohocorpCNA
9.6 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
Affected Products (NVD)
VendorProductVersion
zohocorpmanageengine_exchange_reporter_plus
𝑥
< 5.7
zohocorpmanageengine_exchange_reporter_plus
5.7
zohocorpmanageengine_exchange_reporter_plus
5.7:5700
zohocorpmanageengine_exchange_reporter_plus
5.7:5701
zohocorpmanageengine_exchange_reporter_plus
5.7:5702
zohocorpmanageengine_exchange_reporter_plus
5.7:5703
zohocorpmanageengine_exchange_reporter_plus
5.7:5704
zohocorpmanageengine_exchange_reporter_plus
5.7:5705
zohocorpmanageengine_exchange_reporter_plus
5.7:5706
zohocorpmanageengine_exchange_reporter_plus
5.7:5707
zohocorpmanageengine_exchange_reporter_plus
5.7:5708
zohocorpmanageengine_exchange_reporter_plus
5.7:5709
zohocorpmanageengine_exchange_reporter_plus
5.7:5710
zohocorpmanageengine_exchange_reporter_plus
5.7:5711
zohocorpmanageengine_exchange_reporter_plus
5.7:5712
zohocorpmanageengine_exchange_reporter_plus
5.7:5713
zohocorpmanageengine_exchange_reporter_plus
5.7:5714
zohocorpmanageengine_exchange_reporter_plus
5.7:5715
zohocorpmanageengine_exchange_reporter_plus
5.7:5717
zohocorpmanageengine_exchange_reporter_plus
5.7:5718
zohocorpmanageengine_exchange_reporter_plus
5.7:5719
zohocorpmanageengine_exchange_reporter_plus
5.7:5720
zohocorpmanageengine_exchange_reporter_plus
5.7:5721
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.manageengine.com/products/exchange-reports/advisory/CVE-2025-3835.html