CVE-2025-3835: Remote Code Execution
Published Jun 9, 2025
·Updated
Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module.
Affected Software
24 affected components
ZohoCorp ManageEngine Exchange Reporter Plus<=5721
ZohoCorp ManageEngine Exchange Reporter Plus<5.7
ZohoCorp ManageEngine Exchange Reporter Plus=5.7
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5700
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5701
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5702
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5703
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5704
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5705
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5706
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5707
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5708
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5709
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5710
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5711
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5712
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5713
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5714
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5715
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5717
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5718
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5719
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5720
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5721
Event History
Jun 9, 2025
CVE Published
via MITRE·10:29 AM
Data Sourced
via MITRE·10:29 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-3835?
CVE-2025-3835 has a critical severity rating due to its potential for remote code execution.
2
How do I fix CVE-2025-3835?
To fix CVE-2025-3835, update Zohocorp ManageEngine Exchange Reporter Plus to version 5722 or later.
3
What are the risks of CVE-2025-3835?
The risks associated with CVE-2025-3835 include unauthorized remote code execution which can lead to data breaches or complete system compromise.
4
Which versions of ManageEngine Exchange Reporter Plus are affected by CVE-2025-3835?
Versions 5721 and prior of Zohocorp ManageEngine Exchange Reporter Plus are affected by CVE-2025-3835.
5
Is there any workaround for CVE-2025-3835?
Currently, there are no effective workarounds for CVE-2025-3835; the recommended action is to upgrade to the latest version.