CVE-2025-7429

中危 5.4CVE-2025-7429 · Published 11/11/2025 · updated 18/10/2026

Package	Affected versions	Patched versions
manageengine exchange reporter plus zohocorp	`= 5.7≤ 5.6`	No fix yet

Description

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Mails Deleted or Moved report.

References

manageengine.com/products/exchange-reports/advisory/CVE-2025-7429.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free