Quest

Records167All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical49CVSS 9.0–10.0

CVSS high87CVSS 7.0–8.9

Exploited now

Quest records in CISA KEV

TI-2025-23985 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability CRITICAL 100KEV 2026-04-20 TI-2018-07906 Quest KACE System Management Appliance Remote Command Execution Vulnerability CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Disk Backup 52 records HIGH Netvault Backup 35 records HIGH Kace Systems Management Appliance 21 records CRITICAL Policy Authority For Unified Communications 13 records MEDIUM Kace System Management Appliance 11 records CRITICAL Kace Desktop Authority 5 records MEDIUM Kace Systems Management Appliance Firmware 3 records MEDIUM Intrust 2 records HIGH

Records

21 records in Kace Systems Management Appliance · all components

TI-2025-23985 CVE-2025-32975 · GHSA-hrwx-88rh-95q7

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before…

CRITICAL 100KEV

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypas…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02487 Published 2025-06-24 No fix listed CWE-287

TI-2021-12037 CVE-2021-32084 · GHSA-xvvc-9r93-427f

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

MEDIUM 50

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00556 Published 2026-07-27 No fix listed CWE-284

TI-2021-12041 CVE-2021-32088 · GHSA-wr85-vcm8-q7f4

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

MEDIUM 49

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00516 Published 2026-07-27 No fix listed CWE-384

TI-2021-12039 CVE-2021-32086 · GHSA-5h6h-pp43-x3rj

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

MEDIUM 49

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00329 Published 2026-07-27 No fix listed CWE-321

TI-2022-12168 CVE-2022-29807 · GHSA-f8jh-559g-67xp

A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA)…

MEDIUM 45

A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via download_agent_installer.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01403 Published 2022-08-02 No fix listed CWE-89

TI-2017-09298 CVE-2017-12567 · GHSA-hrw2-62w8-3w4w

SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2…

MEDIUM 45

SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01226 Published 2017-08-07 No fix listed CWE-89

TI-2019-09668 CVE-2019-12918 · GHSA-8752-f7gx-x394

Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to…

MEDIUM 44

Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01053 Published 2019-11-06 No fix listed CWE-89

TI-2022-12522 CVE-2022-30285 · GHSA-r39c-x95w-6gc8

In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is…

MEDIUM 43

In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00569 Published 2022-08-02 No fix listed CWE-326

TI-2021-12040 CVE-2021-32087 · GHSA-fm6r-8jgr-6mvw

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

MEDIUM 41

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00527 Published 2026-07-27 No fix listed CWE-798

TI-2021-12038 CVE-2021-32085 · GHSA-rvhw-g4g5-9g93

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

MEDIUM 41

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00527 Published 2026-07-27 No fix listed CWE-798

TI-2019-09795 CVE-2019-13079 · GHSA-chv7-9fm8-j535

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL…

MEDIUM 41

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01235 Published 2019-11-06 No fix listed CWE-89

TI-2019-09794 CVE-2019-13078 · GHSA-j24m-m7v4-wr84

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL…

MEDIUM 41

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01235 Published 2019-11-06 No fix listed CWE-89

TI-2019-09792 CVE-2019-13076 · GHSA-rc3j-pp37-x4q5

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL…

MEDIUM 41

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01235 Published 2019-11-06 No fix listed CWE-89

TI-2022-17906 CVE-2022-38220 · GHSA-h3vx-9gm4-8j74

An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through…

LOW 36

An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote injection of arbitrary web script or HTML.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2023-02-28 No fix listed CWE-79

TI-2019-08192 CVE-2019-10973 · GHSA-qq7m-c52g-r8p8

Improper input validation in Quest KACE

LOW 36

Quest KACE, all versions prior to version 8.0.x, 8.1.x, and 9.0.x, allows unintentional access to the appliance leveraging functions of the troubleshooting tools located in the administrator user interface.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02371 Published 2019-07-08 No fix listed CWE-20

TI-2022-12169 CVE-2022-29808 · GHSA-6hfm-9hrf-689c

In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token…

LOW 34

In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linking is enabled.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00746 Published 2022-08-02 No fix listed CWE-330

TI-2019-08677 CVE-2019-11604 · GHSA-7mw5-6rmv-p5mm

An issue was discovered in Quest KACE Systems Management Appliance before 9.1.

LOW 31

An issue was discovered in Quest KACE Systems Management Appliance before 9.1.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01664 Published 2019-05-24 No fix listed CWE-79

TI-2019-09793 CVE-2019-13077 · GHSA-98vv-5c96-wxm7

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability…

LOW 29

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the sam_detail_titled.php SAM_TYPE parameter) that allows an attacker to create a malicious link in order to attack authenticate…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00961 Published 2019-11-06 No fix listed CWE-79

TI-2019-09667 CVE-2019-12917 · GHSA-4q93-fvm9-qjff

A reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server…

LOW 29

A reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server Center 9.1.317 affecting the userui/software_library.php component via the PATH_INFO.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00961 Published 2019-11-06 No fix listed CWE-79

TI-2019-09797 CVE-2019-13081 · GHSA-7jrq-v376-6533

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability…

LOW 26

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the title field in the /common/ticket_associated_tickets.php service desk ticket functionality) that allows an authenticated use…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00781 Published 2019-11-06 No fix listed CWE-79

TI-2019-09796 CVE-2019-13080 · GHSA-8mfg-gxq5-jw3p

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability…

LOW 26

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via an SVG image and HTML file) that allows an authenticated user to execute arbitrary JavaScript in an administrator's browser.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00781 Published 2019-11-06 No fix listed CWE-79

Open these records in search →