PT-2025-44411 · Manageengine · Exchange Reporter Plus

Publicado 2025-05-29 · Atualizado 2025-11-07 · CVE-2025-5342

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ManageEngine Exchange Reporter Plus versions through 5721

Description The software contains a Regular Expression Denial of Service (ReDoS) issue within its search module. This could potentially disrupt service due to excessive resource consumption during pattern matching.

Recommendations Update to a version later than 5721.

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

CWE-1333

Identificadores relacionados

BDU:2025-16434

CVE-2025-5342

Produtos afetados

Exchange Reporter Plus

Referências · 7

• https://manageengine.com/products/exchange-reports/advisory/CVE-2025-5342.html · Aviso do Fabricante
• https://t.me/CVEtracker/36191 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-5342 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-5342 · Nota de Segurança
• https://t.me/cveNotify/142036 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1983932425920012615 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2025-16434 · Nota de Segurança