This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-12574 | BDVDB-2026-402777 Detail

ZohocorpDDI Central

Description#

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Server-side HTML/JavaScript injection in analytics PDF generation leading to local file disclosure.

Impact#

CAPEC-63 – Cross-Site Scripting (XSS)

Weaknesses#

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.