CVE-2026-27655 in Exchange Reporter Plus

Resumen (Inglés)

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsable

Zohocorp

Reservar

2026-03-13

Divulgación

2026-04-03

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
355090	Zoho ManageEngine Exchange Reporter Plus Permissions Based on Mailboxes Report secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2026-27655

Fuentes

• MITRE
• NVD
• CVE Details