Lucene search
K

CVE-2021-44031

🗓️ 22 Dec 2021 05:08:18Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 70 Views🌐 WEB

An issue in Quest KACE Desktop Authority before 11.2 allows pre-auth remote code execution via /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2021-44031
22 Dec 202106:15
attackerkb
CNNVD
Quest KACE Desktop Authority 代码问题漏洞
22 Dec 202100:00
cnnvd
CNVD
Quest KACE Desktop Authority Code Issue Vulnerability
24 Dec 202100:00
cnvd
Cvelist
CVE-2021-44031
22 Dec 202105:08
cvelist
EUVD
EUVD-2021-30890
3 Oct 202520:07
euvd
NVD
CVE-2021-44031
22 Dec 202106:15
nvd
OSV
CVE-2021-44031
22 Dec 202106:15
osv
Prion
Design/Logic Flaw
22 Dec 202106:15
prion
RedhatCVE
CVE-2021-44031
22 May 202518:52
redhatcve
NVD
ParameterPositionPathDescriptionCWE
images/{GUID}/{filename}upload datadacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspxPre-authentication RCE via upload of a .ASP file to /images/{GUID}/{filename} through Insertimage.aspxCWE-434

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 04:11Current
9.7High risk
Vulners AI Score9.7
CVSS 27.5
CVSS 3.19.8
EPSS0.02098
70