Known vulnerabilities in ManageEngine DDI Central

Vendor: Zoho Corporation
Software: ManageEngine DDI Central
Software CPE: cpe:2.3:a:zohocorp:manageengine_ddi_central:*:*:*:*:*:*:*:*
Website: https://www.zohocorp.com/index.html
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ManageEngine DDI Central ManageEngine DDI Central is affected by 11 known vulnerabilities: 2 high, 6 medium, 3 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142617 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-12572		 CWE-89 Low
No
No
 6201 15.08.2026 SB2026081504
#VU142616 - Command injection
CVE-2026-12573		 CWE-77 Medium
No
No
 6201 15.08.2026 SB2026081504
#VU142615 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-12574		 CWE-79 Low
No
No
 6201 15.08.2026 SB2026081504
#VU142614 - Improper Access Control
CVE-2026-12571		 CWE-284 High
No
No
 6201 15.08.2026 SB2026081504
#VU142613 - Command injection
CVE-2026-12269		 CWE-77 Medium
No
No
 6201 15.08.2026 SB2026081504
#VU142612 - Improper Access Control
CVE-2026-12264		 CWE-284 Medium
No
No
 6201 15.08.2026 SB2026081504
#VU142611 - Command injection
CVE-2026-12268		 CWE-77 Medium
No
No
 6201 15.08.2026 SB2026081504
#VU142610 - Command injection
CVE-2026-12267		 CWE-77 Medium
No
No
 6201 15.08.2026 SB2026081504
#VU142609 - Improper Access Control
CVE-2026-12266		 CWE-284 Low
No
No
 6201 15.08.2026 SB2026081504
#VU142608 - Improper Access Control
CVE-2026-12265		 CWE-284 Medium
No
No
 6201 15.08.2026 SB2026081504
#VU142618 - Use of Hard-coded Credentials
CVE-2024-5471		 CWE-798 High
No
No
 4002 06.05.2024 SB2024050658