Login Request a demo
QU
Vendor
Quest
19 products with CVEs on record
154
CVEs
3
On KEV
0
New 30D
Products
KS
KACE Systems Management Appliance
Quest
10.0
22 CVEs1 on KEV0 new
KS
KACE System Management Appliance
Quest
9.8
11 CVEs1 on KEV0 new
KS
KACE Systems Management Appliance (SMA)
Quest
10.0
1 CVEs1 on KEV0 new
DB
Disk Backup
Quest
9.8
52 CVEs0 on KEV0 new
NB
NetVault Backup
Quest
9.8
35 CVEs0 on KEV0 new
PA
Policy Authority For Unified Communications
Quest
9.8
13 CVEs0 on KEV0 new
KD
Kace Desktop Authority
Quest
9.8
5 CVEs0 on KEV0 new
KS
Kace Systems Management Appliance Firmware
Quest
8.8
3 CVEs0 on KEV0 new
IN
Intrust
Quest
–
2 CVEs0 on KEV0 new
CM
Coexistence Manager for Notes
Quest
6.3
1 CVEs0 on KEV0 new
FE
Foglight Evolve
Quest
9.8
1 CVEs0 on KEV0 new
KA
K1000 AS A Service
Quest
9.8
1 CVEs0 on KEV0 new
KA
Kace Asset Management Appliance
Quest
9.8
1 CVEs0 on KEV0 new
KS
Kace Systems Deployment Appliance
Quest
6.5
1 CVEs0 on KEV0 new
KS
Kace Systems Management
Quest
9.8
1 CVEs0 on KEV0 new
OI
One Identity
Quest
4.6
1 CVEs0 on KEV0 new
PM
Privilege Manager
Quest
7.2
1 CVEs0 on KEV0 new
PM
Privilege Manager For Unix
Quest
9.8
1 CVEs0 on KEV0 new
TF
Toad For Data Analysts
Quest
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2021-32085
KS
Kace Systems Management Appliance
Quest
8.8
1%
Jul 27An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273
CVE-2021-32088
KS
Kace Systems Management Appliance
Quest
9.8
1%
Jul 27An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273
CVE-2021-32084
KS
Kace Systems Management Appliance
Quest
9.8
1%
Jul 27An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273
CVE-2021-32086
KS
Kace Systems Management Appliance
Quest
9.8
0%
Jul 27An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273
CVE-2021-32087
KS
Kace Systems Management Appliance
Quest
8.8
1%
Jul 27An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273
CVE-2026-7569
NB
NetVault Backup
Quest
8.8
1%
Jun 24Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability
CVE-2026-9787
NB
NetVault Backup
Quest
8.8
5%
Jun 24Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability
CVE-2026-9786
NB
NetVault Backup
Quest
8.8
1%
Jun 24Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability
CVE-2026-9785
NB
NetVault Backup
Quest
8.8
1%
Jun 24Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability
CVE-2026-9784
NB
NetVault Backup
Quest
8.8
1%
Jun 24Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability
CVE-2026-9783
NB
NetVault Backup
Quest
8.8
1%
Jun 24Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability
CVE-2026-9782
NB
NetVault Backup
Quest
8.8
1%
Jun 24Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability
CVE-2026-9781
NB
NetVault Backup
Quest
8.8
1%
Jun 24Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability
CVE-2026-9780
NB
NetVault Backup
Quest
8.8
1%
Jun 24Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability
CVE-2026-7570
NB
NetVault Backup
Quest
8.8
1%
Jun 24Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability
CVE-2025-67813
KD
Kace Desktop Authority
Quest
5.3
0%
Jan 12Quest KACE Desktop Authority through 11.3.1 has Insecure Permissions on the Named Pipes used for inter-process communication
CVE-2025-12874
CM
Coexistence Manager for Notes
Quest
6.3
0%
Dec 19HTTP Request Smuggling in Quest Coexistence Manager for Notes
CVE-2025-56689
OI
One Identity
Quest
4.6
1%
Sep 3One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password (OTP)/Multifactor Authentication (MFA) bypass using response…
CVE-2025-26850
KS
KACE Systems Management Appliance
Quest
9.3
0%
Jul 4The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems
CVE-2025-32975
In wildKEV
KS
Kace Systems Management Appliance
Quest
10.0
2%
Jun 24Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
CVE-2023-33254
KS
Kace Systems Deployment Appliance
Quest
6.5
3%
May 21There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146
CVE-2022-38220
KS
Kace Systems Management Appliance
Quest
6.1
1%
Mar 1An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote injection of arbitrary web script or HTML
CVE-2022-29807
KS
Kace Systems Management Appliance
Quest
9.8
1%
Aug 2A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via download_agent_installer.php
CVE-2022-30285
KS
Kace Systems Management Appliance
Quest
9.8
1%
Aug 2In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication
CVE-2022-29808
KS
Kace Systems Management Appliance
Quest
7.5
1%
Aug 2In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linking is enabled
CVE-2021-44031
KD
Kace Desktop Authority
Quest
9.8
2%
Dec 22An issue was discovered in Quest KACE Desktop Authority before 11.2
CVE-2021-44030
KD
Kace Desktop Authority
Quest
6.1
4%
Dec 22Quest KACE Desktop Authority before 11.2 allows XSS because it does not prevent untrusted HTML from reaching the jQuery.htmlPrefilter method of jQuery
CVE-2021-44029
KD
Kace Desktop Authority
Quest
9.8
1%
Dec 22An issue was discovered in Quest KACE Desktop Authority before 11.2
CVE-2021-44028
KD
Kace Desktop Authority
Quest
5.5
3%
Dec 22XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285
CVE-2020-35727
PA
Policy Authority For Unified Communications
Quest
5.4
1%
Jan 11Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseDirs.do file via the…
CVE-2020-35726
PA
Policy Authority For Unified Communications
Quest
6.1
2%
Jan 11Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the…
CVE-2020-35725
PA
Policy Authority For Unified Communications
Quest
6.1
2%
Jan 11Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/index.jsp file via…
CVE-2020-35724
PA
Policy Authority For Unified Communications
Quest
5.4
1%
Jan 11Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the Error.jsp file via the err…
CVE-2020-35723
PA
Policy Authority For Unified Communications
Quest
5.4
1%
Jan 11Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the ReportPreview.do file via…
CVE-2020-35722
PA
Policy Authority For Unified Communications
Quest
6.5
1%
Jan 11CSRF in Web Compliance Manager in Quest Policy Authority 8.1.2.200 allows remote attackers to force user modification/creation via a specially crafted link to the submitUser.jsp…
CVE-2020-35721
PA
Policy Authority For Unified Communications
Quest
5.4
1%
Jan 11Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseAssets.do file via…
CVE-2020-35720
PA
Policy Authority For Unified Communications
Quest
5.4
1%
Jan 11Stored XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to store malicious code in multiple fields (first name, last name, and logon name) when creating or…
CVE-2020-35719
PA
Policy Authority For Unified Communications
Quest
6.1
2%
Jan 11Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the…
CVE-2020-35206
PA
Policy Authority For Unified Communications
Quest
6.1
1%
Jan 11Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the…
CVE-2020-35205
PA
Policy Authority For Unified Communications
Quest
9.8
2%
Jan 11Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbound connections via…
CVE-2020-35204
PA
Policy Authority For Unified Communications
Quest
6.1
1%
Jan 11Reflected XSS in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the…
CVE-2020-35203
PA
Policy Authority For Unified Communications
Quest
6.1
1%
Jan 11Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the…
CVE-2020-8868
FE
Foglight Evolve
Quest
9.8
9%
Mar 23This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve 9.0.0
CVE-2019-20504
KS
Kace Systems Management
Quest
9.8
10%
Mar 9service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid…
CVE-2019-13081
KS
Kace Systems Management Appliance
Quest
5.4
1%
Nov 6Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the title field in the /common/ticket_associated_tickets.php service desk ticket…
CVE-2019-13080
KS
Kace Systems Management Appliance
Quest
5.4
1%
Nov 6Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via an SVG image and HTML file) that allows an authenticated user to execute arbitrary…
CVE-2019-13079
KS
Kace Systems Management Appliance
Quest
8.8
1%
Nov 6Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection
CVE-2019-13078
KS
Kace Systems Management Appliance
Quest
8.8
1%
Nov 6Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection
CVE-2019-13077
KS
Kace Systems Management Appliance
Quest
6.1
1%
Nov 6Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the sam_detail_titled.php SAM_TYPE parameter) that allows an attacker to create a…
CVE-2019-13076
KS
Kace Systems Management Appliance
Quest
8.8
1%
Nov 6Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection
CVE-2019-12918
KS
Kace Systems Management Appliance
Quest
9.8
1%
Nov 6Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL injection
CVE-2019-12917
KS
Kace Systems Management Appliance
Quest
6.1
1%
Nov 6A reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server Center 9.1.317 affecting the userui/software_library.php component via the PATH_INFO
CVE-2019-10973
KS
Kace Systems Management Appliance
Quest
7.2
2%
Jul 8Quest KACE, all versions prior to version 8.0.x, 8.1.x, and 9.0.x, allows unintentional access to the appliance leveraging functions of the troubleshooting tools located in the…
CVE-2018-5406
KS
Kace Systems Management Appliance Firmware
Quest
8.8
12%
Jun 3The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows a remote attacker to exploit the misconfigured Cross-Origin Resource Sharing (CORS) mechanism
CVE-2018-5405
KS
Kace Systems Management Appliance Firmware
Quest
5.4
4%
Jun 3The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated least privileged user with 'User Console Only' rights to potentially inject arbitrary JavaScript…
CVE-2018-5404
KS
Kace Systems Management Appliance Firmware
Quest
6.5
4%
Jun 3The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated, remote attacker with least privileges ('User Console Only' role) to potentially exploit…
CVE-2019-11604
KS
Kace Systems Management Appliance
Quest
6.1
2%
May 24An issue was discovered in Quest KACE Systems Management Appliance before 9.1
CVE-2018-11194
DB
Disk Backup
Quest
8.8
3%
Jun 2Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of 6)
CVE-2018-11193
DB
Disk Backup
Quest
8.8
3%
Jun 2Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of 6)
CVE-2018-11192
DB
Disk Backup
Quest
8.8
3%
Jun 2Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of 6)