CVE-2025-3835: Zohocorp ManageEngine Exchange Reporter Plus

Critical severity, CVSS 9.6. EPSS: 2.2% chance of exploitation in the next 30 days.

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module.

Affected products

• Zohocorp ManageEngine Exchange Reporter Plus: before 5.7 (fixed in 5.7); version 5.7 only

Published 2025-06-09. Last modified 2026-06-17.