CVE-2026-12574 | BDVDB-2026-402777 Detail
ZohocorpDDI Central
Description#
Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Server-side HTML/JavaScript injection in analytics PDF generation leading to local file disclosure.
Impact#
CAPEC-63 – Cross-Site Scripting (XSS)
Weaknesses#
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.