Login Request a demo
KS
Product
KACE Systems Management Appliance
by Quest · last CVE Jul 27, 2026
On CISA KEVExploited in the wild
22
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities22In the news3Timeline
Severity mix
Critical 9High 7Medium 6Low 0
Severity
All severities22Critical9High7Medium6Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add KACE Systems Management Appliance to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-32975
In wildKEV
10.0
2%
Jun 24
Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
Affected: 13.0 before 13.0.385; 13.1 before 13.1.81; 13.2 before 13.2.183; 14.0 before 14.0.341; 14.1 before 14.1.101
CVE-2021-32088
9.8
1%
Jul 27
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273
Affected: 11.0.273
CVE-2021-32084
9.8
1%
Jul 27
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273
Affected: 11.0.273
CVE-2021-32086
9.8
0%
Jul 27
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273
Affected: 11.0.273
CVE-2022-29807
9.8
1%
Aug 2
A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via download_agent_installer.php
Affected: before 12.1.168
CVE-2022-30285
9.8
1%
Aug 2
In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication
Affected: before 12.1.168
CVE-2019-12918
9.8
1%
Nov 6
Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL injection
Affected: 9.1.317
CVE-2017-12567
9.8
1%
Aug 7
SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through…
Affected: 6.4.120822; 7.0; 7.0.121306; 7.1; 7.1.149; 7.2; +1 more
CVE-2025-26850
9.3
0%
Jul 4
The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems
Affected: before 14.0.97; 14.1.0 before 14.1.19
Showing 9