← Vulnerability feed

Vulnerability record · CVE-2025-3835 · published 9 June 2025

CVE-2025-3835: Zohocorp manageengine exchange reporter plus unrestricted file upload vulnerability

Zohocorp · Manageengine Exchange Reporter Plus

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module.

9.6 CVSS 3.1 Critical EPSS 2.2% · top 17.9% CWE-434 · Unrestricted file upload
9.6CVSS 3.1 base score
2.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.manageengine.com/products/exchange-reports/advisory/CVE-2025-3835.html Vendor Advisory

Track CVE-2025-3835 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-24786Zohocorp manageengine adselfservice plus improper authentication vulnerabilityAn issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus befo…EPSS 13%8.8CVE-2024-9459Zohocorp manageengine exchange reporter plus sql injection vulnerabilityZohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module.EPSS 4.5%8.8CVE-2024-38871Zohocorp manageengine exchange reporter plus sql injection vulnerabilityZohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module.EPSS 3.1%8.8CVE-2024-38872Zohocorp manageengine exchange reporter plus sql injection vulnerabilityZohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module.EPSS 3.1%8.8CVE-2024-21775Zohocorp manageengine exchange reporter plus sql injection vulnerabilityZoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature.EPSS 5.0%8.8CVE-2022-29457Zohocorp manageengine adaudit plus insufficiently protected credentials vulnerabilityZoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure du…EPSS 7.9%8.1CVE-2025-5966Zohocorp manageengine exchange reporter plus cross-site scripting vulnerabilityZohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report.EPSS 1.3%8.1CVE-2025-5366Zohocorp manageengine exchange reporter plus cross-site scripting vulnerabilityZohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Folder-wise read mails with subject report.EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2025-3835), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.