CVE record · 1 source
CVE-2026-12572
CVSS 7.2Zoho Corporation ManageEngine DDI Central version below 6201 is vulnerable to SQL injection in HA replication username handling leading to command…
- Vendor
- Zohocorp
- Product
- DDI Central
- CVSS v3.1
- 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-89
- Exposure class
- Database, Identity
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Zoho Corporation ManageEngine DDI Central version below 6201 is vulnerable to SQL injection in HA replication username handling leading to command…
Zoho Corporation ManageEngine DDI Central version below 6201 is vulnerable to SQL injection in HA replication username handling leading to command execution as the PostgreSQL service account.