Read the docs
TI-2018-03933 Aliases CVE-2018-5405GHSA-5prc-w35f-xhqm

The Quest Kace K1000 Appliance is vulnerable to JavaScript injection.

Priority LOW 31CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated least privileged user with 'User Console Only' rights to potentially inject arbitrary JavaScript code on the tickets page. Script execution could allow a malicious user of the system to steal session cookies of other users including Administrator and take over their session. This can further be exploited to launch other attacks. The software also does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other user. An authenticated user with 'user console only' rights may inject arbitrary JavaScript, which could result in an attacker taking over a session of others, including an Administrator.

Why it matters now

EPSS 0.03611 89th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed K1000 Appliance (Quest Kace): 9.0.270

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
QuestK1000 Appliance9.0.270 to before 9.0.2709.0.270Patch availableCNA
  • K1000 Appliance VendorQuest Affected 9.0.270 to before 9.0.270 Fixed in 9.0.270 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:quest:kace_systems_management_appliance_firmware:*:*:*:*:*:*:*:*before 9.0.270VulnerableQuest
cpe:2.3:h:quest:kace_systems_management_appliance:-:*:*:*:*:*:*:*not specified by NVDRunning onQuest
  • cpe:2.3:o:quest:kace_systems_management_appliance_firmware:*:*:*:*:*:*:*:* Versions before 9.0.270 Vulnerable ·Quest
  • cpe:2.3:h:quest:kace_systems_management_appliance:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Quest

Remediation

  • Fix · CNA K1000 Appliance (Quest Kace) Fixed in 9.0.270

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Quest Kace K1000 Appliance 9.0.270

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2018-03934 The Quest Kace K1000 Appliance misconfigures the Cross-Origin Resource Sharing (CORS) mechanism.Priority MEDIUM 52
    • TI-2018-03932 The Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections.Priority LOW 35
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-5405
  2. 2026-10-03 Alias added: GHSA-5prc-w35f-xhqm

References

Exploit 1

Advisory 2

  • TI-2018-03934 The Quest Kace K1000 Appliance misconfigures the Cross-Origin Resource Sharing (CORS) mechanism. CVSS 3.1HIGH 8.8
  • TI-2018-03932 The Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections. CVSS 3.0MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences