CVE-2025-7429: Stored XSS
Published Nov 11, 2025
·Updated
Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Mails Deleted or Moved report.
Affected Software
26 affected components
Zohocorp ManageEngine Exchange Reporter Plus<5723
Zohocorp ManageEngine Exchange Reporter Plus<=5.6
Zohocorp ManageEngine Exchange Reporter Plus=5.7
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5700
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5701
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5702
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5703
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5704
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5705
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5706
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5707
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5708
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5709
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5710
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5711
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5712
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5713
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5714
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5715
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5717
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5718
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5719
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5720
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5721
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5722
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5723
Event History
Nov 11, 2025
CVE Published
via MITRE·07:40 AM
Data Sourced
via MITRE·07:40 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-7429?
CVE-2025-7429 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2025-7429?
To fix CVE-2025-7429, upgrade Zohocorp ManageEngine Exchange Reporter Plus to version 5724 or later.
3
What type of vulnerability is CVE-2025-7429?
CVE-2025-7429 is a Stored Cross-Site Scripting (XSS) vulnerability.
4
In which versions of ManageEngine Exchange Reporter Plus is CVE-2025-7429 found?
CVE-2025-7429 is found in versions 5723 and below of ManageEngine Exchange Reporter Plus.
5
What impact does CVE-2025-7429 have on affected systems?
CVE-2025-7429 can allow an attacker to execute arbitrary JavaScript code in the context of a user session.