CVE-2026-27655: Stored XSS Vulnerability
Published Apr 3, 2026
·Updated
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report.
Affected Software
4 affected components
Zohocorp ManageEngine Exchange Reporter Plus<5.8
Zohocorp ManageEngine Exchange Reporter Plus=5.8
Zohocorp ManageEngine Exchange Reporter Plus=5.8-5800
Zohocorp ManageEngine Exchange Reporter Plus=5.8-5801
Event History
Apr 3, 2026
CVE Published
via MITRE·12:23 PM
Data Sourced
via MITRE·12:23 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeaknessAffected Software