BaseFortify

Publication date: 2025-10-30

Last updated on: 2025-11-07

Assigner: ManageEngine

Description

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-30

Last Modified

2025-11-07

Generated

2026-07-06

AI Q&A

2025-10-30

EPSS Evaluated

2026-07-05

NVD

CVE-2025-5342

EUVD

EUVD-2025-37005

Affected Vendors & Products

Vendor	Product	Version / Range
zohocorp	manageengine_exchange_reporter_plus	to 5.7 (exc)
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7
zohocorp	manageengine_exchange_reporter_plus	5.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1333	The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability is a Regular Expression Denial of Service (ReDOS) issue found in the search module of Zohocorp ManageEngine Exchange Reporter Plus versions up to 5721. It allows an attacker to exploit the search functionality to cause excessive resource consumption, potentially leading to a denial of service.

Impact Analysis

The vulnerability can impact you by causing a denial of service condition in the affected software. An attacker could exploit the ReDOS vulnerability to make the search module consume excessive CPU resources, leading to degraded performance or unavailability of the service.

Hi! I’m here to help you understand CVE-2025-5342. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70