Read the docs

Quest

Records167All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical49CVSS 9.0–10.0
CVSS high87CVSS 7.0–8.9

Exploited now

Quest records in CISA KEV
TI-2025-23985 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability Priority CRITICAL 100KEV 2026-04-20TI-2018-07906 Quest KACE System Management Appliance Remote Command Execution Vulnerability Priority CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records
Disk Backup 52 records HIGH Netvault Backup 35 records HIGH Kace Systems Management Appliance 21 records CRITICAL Policy Authority For Unified Communications 13 records MEDIUM Kace System Management Appliance 11 records CRITICAL Kace Desktop Authority 5 records MEDIUM Kace Systems Management Appliance Firmware 3 records MEDIUM Intrust 2 records HIGH

Records

3 records in Kace Systems Management Appliance Firmware · all components

TI-2018-03932 CVE-2018-5404 · GHSA-rgpj-f9xq-fr9h

The Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections.

Priority LOW 35

The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated, remote attacker with least privileges ('User Console Only' role) to potentially exploit multiple Blind SQL Injection vulnerabilities to…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03765 Published 2019-06-03 Fixed in 9.0.270 CWE-89
TI-2018-03933 CVE-2018-5405 · GHSA-5prc-w35f-xhqm

The Quest Kace K1000 Appliance is vulnerable to JavaScript injection.

Priority LOW 31

The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated least privileged user with 'User Console Only' rights to potentially inject arbitrary JavaScript code on the tickets page.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.03611 Published 2019-06-03 Fixed in 9.0.270 CWE-79
Open these records in search →