CVE-2026-27655

4.8 mediumEPSS 0.5%

Medium (4.8) in zohocorp manageengine exchange reporter plus. EPSS 0.5% chance of exploitation in the next 30 days.

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report.

Severity

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2026-04-03
Modified: 2026-07-20
Record from: the NVD, synced 2026-10-19