Lucene search
PRIOn knowledge basePRION:CVE-2019-11604HistoryMay 24, 2019 - 5:29 p.m.
Input validation
2019-05-2417:29:00
PRIOn knowledge base
www.prio-n.com
2
0.006 Low
EPSS
Percentile
77.8%
An issue was discovered in Quest KACE Systems Management Appliance before 9.1. The script at /service/kbot_service_notsoap.php is vulnerable to unauthenticated reflected XSS when user-supplied input to the METHOD GET parameter is processed by the web application. Since the application does not properly validate and sanitize this parameter, it is possible to place arbitrary script code into the context of the same page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kace_systems_management_appliance | lt | 9.1 |
Related
cvelist
cvelist
CVE-2019-11604
2019-05-24 16:04:52
nvd
nvd
CVE-2019-11604
2019-05-24 17:29:02
packetstorm
packetstorm
Quest KACE Systems Management Appliance 9.0 Cross Site Scripting
2019-05-23 00:00:00
cve
cve
CVE-2019-11604
2019-05-24 17:29:02