Login Request a demo
KS
Product
KACE System Management Appliance
by Quest · last CVE May 31, 2018
On CISA KEVExploited in the wildRansomware-linked
11
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 4High 4Medium 3Low 0
Severity
All severities11Critical4High4Medium3Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add KACE System Management Appliance to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-11138
RansomwareIn wildKEV
9.8
92%
May 31
Quest KACE System Management Appliance Remote Command Execution Vulnerability
Affected: 8.0.318
CVE-2018-11141
9.8
2%
May 31
The 'IMAGES_JSON' and 'attachments_to_remove[]' parameters of the '/adminui/advisory.php' script in the Quest KACE System Management Virtual Appliance 8.0.318 can be abused to…
Affected: 8.0.318
CVE-2018-11140
9.8
1%
May 31
The 'reportID' parameter received by the '/common/run_report.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in…
Affected: 8.0.318
CVE-2018-11136
9.8
1%
May 31
The 'orgID' parameter received by the '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL…
Affected: 8.0.318
Showing 4