PT-2025-44411 · Manageengine · Exchange Reporter Plus

Published 2025-05-29 · Updated 2025-11-07 · CVE-2025-5342

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ManageEngine Exchange Reporter Plus versions through 5721

Description The software contains a Regular Expression Denial of Service (ReDoS) issue within its search module. This could potentially disrupt service due to excessive resource consumption during pattern matching.

Recommendations Update to a version later than 5721.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-1333

Related Identifiers

BDU:2025-16434

CVE-2025-5342

Affected Products

Exchange Reporter Plus

References · 7

• https://manageengine.com/products/exchange-reports/advisory/CVE-2025-5342.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-5342 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5342 · Security Note
• https://bdu.fstec.ru/vul/2025-16434 · Security Note
• https://t.me/CVEtracker/36191 · Telegram Post
• https://t.me/cveNotify/142036 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1983932425920012615 · Twitter Post