CVE-2025-7632: Zohocorp ManageEngine Exchange Reporter Plus

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Public Folders report.

Affected products

• Zohocorp ManageEngine Exchange Reporter Plus: up to and including 5.6; version 5.7 only

Published 2025-11-11. Last modified 2026-06-17.