Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

21 records

Priority CRITICAL 100KEV

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypas…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02487 Published 2025-06-24 No fix listed CWE-287
Priority LOW 26

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the title field in the /common/ticket_associated_tickets.php service desk ticket functionality) that allows an authenticated use…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00781 Published 2019-11-06 No fix listed CWE-79
Priority LOW 26

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via an SVG image and HTML file) that allows an authenticated user to execute arbitrary JavaScript in an administrator's browser.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00781 Published 2019-11-06 No fix listed CWE-79
Priority LOW 29

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the sam_detail_titled.php SAM_TYPE parameter) that allows an attacker to create a malicious link in order to attack authenticate…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00961 Published 2019-11-06 No fix listed CWE-79
TI-2019-08192 CVE-2019-10973 · GHSA-qq7m-c52g-r8p8

Improper input validation in Quest KACE

Priority LOW 36

Quest KACE, all versions prior to version 8.0.x, 8.1.x, and 9.0.x, allows unintentional access to the appliance leveraging functions of the troubleshooting tools located in the administrator user interface.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02371 Published 2019-07-08 No fix listed CWE-20