Login Request a demo
KS
Product
KACE System Management Appliance
by Quest · last CVE May 31, 2018
On CISA KEVExploited in the wildRansomware-linked
11
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 4High 4Medium 3Low 0
Severity
All severities11Critical4High4Medium3Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add KACE System Management Appliance to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-11139
8.8
42%
May 31
The '/common/ajax_email_connection_test.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any authenticated user and can be abused to execute…
Affected: 8.0.318
CVE-2018-11135
8.8
2%
May 31
The script '/adminui/error_details.php' in the Quest KACE System Management Appliance 8.0.318 allows authenticated users to conduct PHP object injection attacks
Affected: 8.0.318
CVE-2018-11134
8.8
3%
May 31
In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs with root privileges…
Affected: 8.0.318
CVE-2018-11132
8.8
18%
May 31
In order to perform actions that require higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue that runs daemonized with root privileges…
Affected: 8.0.318
Showing 4