Cross site scripting

2023-03-0100:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

quest kace systems

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote injection of arbitrary web script or HTML.

CPENameOperatorVersion
kace_systems_management_appliancele12.1

CPE	Name	Operator	Version
	kace_systems_management_appliance	le	12.1

References

support.quest.com/kb/339613

support.quest.com/kb/4368602/quest-response-to-kace-sma-vulnerability-cve-2022-38220