VulnCheck KEV: CVE-2025-32975

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid...

CVE-2018-25159: Unauthorized Error Injection Can Degrade Hardware Redundancy

Epross AVCON6 systems management platform contains an object-graph navigation language OGNL injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expressions. Attackers can send crafted requests to the login.action endpoint with OG...

The vulnerability of the Quest KACE Systems Management Appliance’s tool for comprehensive network device management lies in the lack of authentication for critical functions. This allows attackers to trigger a service failure.

The vulnerability of the Quest KACE Systems Management Appliance SMA tool for comprehensive network device management is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

EUVD-2019-8171

Malware in sbrugna...

EUVD-2017-4139

Malware in sbrugna...

EUVD-2022-34128

Malicious code in bioql PyPI...

EUVD-2025-20096

Malicious code in bioql PyPI...

EUVD-2022-40812

Malicious code in bioql PyPI...

The vulnerability of the Quest KACE Systems Management Appliance’s tool for comprehensive network device management, related to authentication procedures that have flaws, allows attackers to bypass the authentication process.

The vulnerability of the Quest KACE Systems Management Appliance SMA tool for comprehensive network device management is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers operating remotely to bypass the authentication process...

CVE-2025-26850

The agent in Quest KACE Systems Management Appliance SMA before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems...

CVE-2025-26850: Incorrect Authorization

The agent in Quest KACE Systems Management Appliance SMA before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems...

PT-2025-28028 · Quest · Quest Kace System Management Appliance

Name of the Vulnerable Software and Affected Versions: Quest KACE Systems Management Appliance SMA versions 14.0.0 through 14.0.96 Quest KACE Systems Management Appliance SMA versions 14.1.0 through 14.1.18 Description: The issue potentially allows privilege escalation on managed systems...

CVE-2025-26850

The agent in Quest KACE Systems Management Appliance SMA before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems...

CVE-2025-32975

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid...

CVE-2025-32977

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...

CVE-2025-32978

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to replace system licenses through a web interface intended for license renewal...

CVE-2025-32976

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains a logic flaw in its two-factor authentication implementation that allows authenticated users to bypass...

CVE-2025-32978

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to replace system licenses through a web interface intended for license renewal...

CVE-2025-32978: Missing Authentication for Critical Function

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to replace system licenses through a web interface intended for license renewal...

Quest KACE Systems Management Appliance 14.1 Unauthenticated Backup Upload

Seralys Security Advisory - Quest KACE SMA allows unauthenticated users to upload backup files to the system. While signature validation is implemented, weaknesses in the validation process can be exploited to upload malicious backup content that could compromise system integrity. Version 14.1 is...