ReDOS Vulnerability in Zohocorp ManageEngine Exchange Reporter Plus

CVE-2025-5342

What is CVE-2025-5342?

The ManageEngine Exchange Reporter Plus by Zohocorp is susceptible to a Regular Expression Denial of Service (ReDOS) vulnerability in its search module. This vulnerability could allow an attacker to exploit inefficient regex patterns, potentially leading to service disruption and denial of access to legitimate users. Immediate patching and mitigation measures are advised to ensure system integrity.

References