Login Request a demo
KS
Product
KACE System Management Appliance
by Quest · last CVE May 31, 2018
On CISA KEVExploited in the wildRansomware-linked
11
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 4High 4Medium 3Low 0
Severity
All severities11Critical4High4Medium3Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add KACE System Management Appliance to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-11137
6.5
6%
May 31
The 'checksum' parameter of the '/common/download_attachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www'…
Affected: 8.0.318
CVE-2018-11133
6.1
9%
May 31
The 'fmt' parameter of the '/common/run_cross_report.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting
Affected: 8.0.318
CVE-2018-11142
5.5
0%
May 31
The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost
Affected: 8.0.318
Showing 3