PT-2025-24419 · Zohocorp · Zoho Manageengine Exchange Reporter Plus

Ngockhanhc311 · Published 2025-05-29 · Updated 2025-06-10 · CVE-2025-3835

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior

Description The issue concerns remote code execution in the Content Search module. It is related to the CWE-434 Unrestricted Upload of File with Dangerous Type. Remote code execution is possible, allowing attackers to execute malicious code on the affected system.

Recommendations For versions 5721 and prior, update to a version later than 5721 to resolve the issue. As a temporary workaround, consider disabling the Content Search module until a patch is available. Restrict access to the Content Search module to minimize the risk of exploitation.

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2025-06704

CVE-2025-3835

Affected Products

Zoho Manageengine Exchange Reporter Plus

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-3835 · Security Note
• https://manageengine.com/products/exchange-reports/advisory/CVE-2025-3835.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06704 · Security Note
• https://osv.dev/vulnerability/CVE-2025-3835 · Vendor Advisory
• https://twitter.com/offseq/status/1932263985635590392 · Twitter Post
• https://t.me/cvenotify/125060 · Telegram Post
• https://t.me/cvetracker/25768 · Telegram Post
• https://twitter.com/CVEnew/status/1932026650289381574 · Twitter Post
• https://t.me/latest_high_impact_cve/2589 · Telegram Post
• https://manageengine.com/products/active-directory-audit/cve-2025-36528.html · Note