Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Quest Component: Kace Systems Management Appliance Firmware Clear all filters
TI-2018-03932 CVE-2018-5404 · GHSA-rgpj-f9xq-fr9h

The Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections.

Priority LOW 35

The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated, remote attacker with least privileges ('User Console Only' role) to potentially exploit multiple Blind SQL Injection vulnerabilities to…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03765 Published 2019-06-03 Fixed in 9.0.270 CWE-89
TI-2018-03933 CVE-2018-5405 · GHSA-5prc-w35f-xhqm

The Quest Kace K1000 Appliance is vulnerable to JavaScript injection.

Priority LOW 31

The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated least privileged user with 'User Console Only' rights to potentially inject arbitrary JavaScript code on the tickets page.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.03611 Published 2019-06-03 Fixed in 9.0.270 CWE-79