Quest

Records167All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical49CVSS 9.0–10.0

CVSS high87CVSS 7.0–8.9

Exploited now

Quest records in CISA KEV

TI-2025-23985 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability CRITICAL 100KEV 2026-04-20 TI-2018-07906 Quest KACE System Management Appliance Remote Command Execution Vulnerability CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Disk Backup 52 records HIGH Netvault Backup 35 records HIGH Kace Systems Management Appliance 21 records CRITICAL Policy Authority For Unified Communications 13 records MEDIUM Kace System Management Appliance 11 records CRITICAL Kace Desktop Authority 5 records MEDIUM Kace Systems Management Appliance Firmware 3 records MEDIUM Intrust 2 records HIGH

Records

5 records in Kace Desktop Authority · all components

TI-2021-19782 CVE-2021-44031 · GHSA-8q8x-2f93-mwpm

An issue was discovered in Quest KACE Desktop Authority before 11.2.

MEDIUM 46

An issue was discovered in Quest KACE Desktop Authority before 11.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02167 Published 2021-12-22 No fix listed CWE-434

TI-2021-19780 CVE-2021-44029 · GHSA-c7j6-8r6v-p532

An issue was discovered in Quest KACE Desktop Authority before 11.2.

MEDIUM 44

An issue was discovered in Quest KACE Desktop Authority before 11.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00897 Published 2021-12-22 No fix listed CWE-502

TI-2021-19781 CVE-2021-44030 · GHSA-cj74-p2xx-vph4

Quest KACE Desktop Authority before 11.2 allows XSS because it does not prevent untrusted…

LOW 34

Quest KACE Desktop Authority before 11.2 allows XSS because it does not prevent untrusted HTML from reaching the jQuery.htmlPrefilter method of jQuery.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04298 Published 2021-12-22 No fix listed CWE-79

TI-2021-19779 CVE-2021-44028 · GHSA-6vh7-mxw3-7f49

XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net…

LOW 30

XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.03099 Published 2021-12-22 No fix listed CWE-611

TI-2025-41466 CVE-2025-67813 · GHSA-c87m-hx3f-42wq

Quest KACE Desktop Authority through 11.3.1 has Insecure Permissions on the Named Pipes…

LOW 23

Quest KACE Desktop Authority through 11.3.1 has Insecure Permissions on the Named Pipes used for inter-process communication

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00224 Published 2026-01-12 No fix listed CWE-276

Open these records in search →