Show filters
21 Total Results
Displaying 1-10 of 21
Sort by:
Attacker Value
Unknown
CVE-2022-38220
Disclosure Date: March 01, 2023 (last updated October 08, 2023)
An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote injection of arbitrary web script or HTML.
0
Attacker Value
Unknown
CVE-2022-30285
Disclosure Date: August 02, 2022 (last updated February 24, 2025)
In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication. This may allow authentication with invalid credentials.
0
Attacker Value
Unknown
CVE-2022-29808
Disclosure Date: August 02, 2022 (last updated February 24, 2025)
In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linking is enabled.
0
Attacker Value
Unknown
CVE-2022-29807
Disclosure Date: August 02, 2022 (last updated February 24, 2025)
A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via download_agent_installer.php.
0
Attacker Value
Unknown
CVE-2019-20504
Disclosure Date: March 09, 2020 (last updated February 21, 2025)
service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid parameter.
0
Attacker Value
Unknown
CVE-2019-13076
Disclosure Date: November 06, 2019 (last updated November 27, 2024)
Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticket_list.php, and affected parameters are order[0][column] and order[0][dir].
0
Attacker Value
Unknown
CVE-2019-12918
Disclosure Date: November 06, 2019 (last updated November 27, 2024)
Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL injection. The affected file is software_library.php and affected parameters are order[0][column] and order[0][dir].
0
Attacker Value
Unknown
CVE-2019-13078
Disclosure Date: November 06, 2019 (last updated November 27, 2024)
Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /common/user_profile.php. The affected parameter is sort_column.
0
Attacker Value
Unknown
CVE-2019-13077
Disclosure Date: November 06, 2019 (last updated November 27, 2024)
Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the sam_detail_titled.php SAM_TYPE parameter) that allows an attacker to create a malicious link in order to attack authenticated users.
0
Attacker Value
Unknown
CVE-2019-13079
Disclosure Date: November 06, 2019 (last updated November 27, 2024)
Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /adminui/history_log.php. The affected parameter is TYPE_NAME.
0
