CVE-2025-7633: Stored XSS
Published Nov 11, 2025
·Updated
Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Custom report.
Affected Software
26 affected components
Zohocorp ManageEngine Exchange Reporter Plus<=5723
Zohocorp ManageEngine Exchange Reporter Plus<=5.6
Zohocorp ManageEngine Exchange Reporter Plus=5.7
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5700
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5701
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5702
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5703
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5704
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5705
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5706
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5707
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5708
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5709
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5710
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5711
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5712
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5713
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5714
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5715
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5717
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5718
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5719
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5720
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5721
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5722
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5723
Event History
Nov 11, 2025
CVE Published
via MITRE·10:32 AM
Data Sourced
via MITRE·10:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-7633?
CVE-2025-7633 is categorized as a medium severity Stored XSS vulnerability.
2
How do I fix CVE-2025-7633?
To mitigate CVE-2025-7633, upgrade Zohocorp ManageEngine Exchange Reporter Plus to version 5724 or later.
3
What versions of Zohocorp ManageEngine Exchange Reporter Plus are affected by CVE-2025-7633?
Versions 5723 and below of Zohocorp ManageEngine Exchange Reporter Plus are affected by CVE-2025-7633.
4
What type of vulnerability is CVE-2025-7633?
CVE-2025-7633 is a Stored Cross-Site Scripting (XSS) vulnerability.
5
Can CVE-2025-7633 be exploited remotely?
Yes, CVE-2025-7633 can be exploited remotely through the Custom report feature.