ManageEngine (Exchange Reporter Plus) Product June 2025 Security Update Advisory

Overview

 

Zoho(https://www.zohocorp.com/) has released a security update that addresses a vulnerability in its ManageEngine suite of products. Users of affected products are advised to update to the latest version.

 

Affected Products

 

Exchange Reporter Plus build 5721 and earlier

 

Resolved Vulnerabilities

 

A remote code execution vulnerability (CVE-2025-3835) with a severe impact rating in Exchange Reporter Plus [1]

 

Vulnerability Patches

 

Please follow the security advisory published on June 02, 2016 to update to the appropriate version and the latest version.

Exchange Reporter Plus version 5722

 

Referenced Sites

 

[1] CVE-2025-3835 – Remote Code Execution

https://www.manageengine.com/products/exchange-reports/advisory/CVE-2025-3835.html