Zoho Corporation ManageEngine DDI Central version below 6201 is vulnerable to SQL injection in HA replication username handling leading to command…
Zoho Corporation ManageEngine DDI Central version below 6201 is vulnerable to SQL injection in HA replication username handling leading to command execution as the PostgreSQL service account.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Zohocorp
- Product
- DDI Central
- CVSS v3.1
- 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-89
- Exposure class
- Database, Identity
- NVD status
- Received
Why it ranks 37 (Notable)
- CVSS v3.1 7.2 high
- Exposed product class: identity
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-12572 on this site · NVD · CVE.org · Vulnpedia