CVE-2025-5342

MEDIUM 6.5CVE-2025-5342 · Published 30/10/2025 · updated 08/10/2026

In short

CVE-2025-5342 is a MEDIUM (CVSS 6.5) vulnerability affecting manageengine exchange reporter plus (zohocorp).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.6% of all vulnerabilities.
Fix: update to 5.7 or later.

Package	Affected versions	Patched versions
manageengine exchange reporter plus zohocorp	`= 5.7< 5.7`	`5.7`

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 5.7< 5.7

5.7

More vulnerabilities in manageengine exchange reporter plus

See all →