CVE-2026-4107

High CVSS: 7.3

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count and Size report.

Vendor

Product

CWE

Yayın Tarihi

2026-04-03 12:16:19

Güncelleme

2026-04-03 18:26:35

Source Identifier

0fc0942c-577d-436f-ae8e-945763c79b02

KEV Date Added

CWE-79 Manageengine Exchange Reporter Plus HIGH Zohocorp 2026

https://www.manageengine.com/products/exchange-reports/advisory/CVE-2026-4107.html

High

CVE-2026-27655

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on M…

High

CVE-2026-4108

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Perm…

High

CVE-2026-3879

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Equipment Mailbox Deta…

High

CVE-2026-3880

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client P…

High

CVE-2026-28703

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Mails Exchanged Betwee…

High

CVE-2026-28754

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists rep…