Known vulnerabilities in ManageEngine DDI Central 6200

Vendor: Zoho Corporation
Software: ManageEngine DDI Central
Version: 6200
Software CPE: cpe:2.3:a:zohocorp:manageengine_ddi_central:*:*:*:*:*:*:*:*
Website: https://www.zohocorp.com/index.html
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ManageEngine DDI Central version 6200 ManageEngine DDI Central 6200 is affected by 10 vulnerabilities: 1 high, 6 medium, 3 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142617 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-12572		 CWE-89 Low
No
No
 6201 15.08.2026 SB2026081504
#VU142616 - Command injection
CVE-2026-12573		 CWE-77 Medium
No
No
 6201 15.08.2026 SB2026081504
#VU142615 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-12574		 CWE-79 Low
No
No
 6201 15.08.2026 SB2026081504
#VU142614 - Improper Access Control
CVE-2026-12571		 CWE-284 High
No
No
 6201 15.08.2026 SB2026081504
#VU142613 - Command injection
CVE-2026-12269		 CWE-77 Medium
No
No
 6201 15.08.2026 SB2026081504
#VU142612 - Improper Access Control
CVE-2026-12264		 CWE-284 Medium
No
No
 6201 15.08.2026 SB2026081504
#VU142611 - Command injection
CVE-2026-12268		 CWE-77 Medium
No
No
 6201 15.08.2026 SB2026081504
#VU142610 - Command injection
CVE-2026-12267		 CWE-77 Medium
No
No
 6201 15.08.2026 SB2026081504
#VU142609 - Improper Access Control
CVE-2026-12266		 CWE-284 Low
No
No
 6201 15.08.2026 SB2026081504
#VU142608 - Improper Access Control
CVE-2026-12265		 CWE-284 Medium
No
No
 6201 15.08.2026 SB2026081504