CVE-2021-44029

An issue was discovered in Quest KACE Desktop Authority before 11.2. This vulnerability allows attackers to execute remote code through a deserialization exploitation in the RadAsyncUpload function of ASP.NET AJAX. An attacker can leverage this vulnerability when the encryption keys are known due...

CVE-2021-44031

An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker could upload a .ASP file to reside at /images/GUID/filename...

CVE-2021-44031

CVE-2021-44031 concerns Quest KACE Desktop Authority prior to 11.2. The issue is described as a vulnerability in /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx that could enable pre-authentication remote code execution, with an attacker able to upload a .ASP file to reside ...

CVE-2021-44030

Quest KACE Desktop Authority before 11.2 allows XSS because it does not prevent untrusted HTML from reaching the jQuery.htmlPrefilter method of jQuery...

CVE-2021-44030

CVE-2021-44030 affects Quest KACE Desktop Authority before 11.2. The issue is a Cross-Site Scripting (XSS) vulnerability where untrusted HTML can reach jQuery.htmlPrefilter, as described across multiple connected sources. Root cause: unvalidated HTML reaches the jQuery prefilter. Impact: XSS pote...

CVE-2021-44028

CVE-2021-44028 : XXE vulnerability in Quest KACE Desktop Authority before 11.2 due to attacker-controlled log4net configuration files. The initial description ties the issue to a log4net configuration weakness (related to CVE-2018-1285). Connected documents do not provide further product-specific...

CVE-2021-44028

XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285...

Quest KACE Desktop Authority 代码问题漏洞

Quest KACE Desktop Authority is a desktop management software from Quest Inc. A code issue vulnerability exists in Quest KACE Desktop Authority, which can be exploited by attackers to remotely execute code...

Quest KACE Desktop Authority 代码问题漏洞

Quest KACE Desktop Authority is a desktop management software from Quest, Inc. Quest KACE Desktop Authority is vulnerable to XXE and no detailed vulnerability details are available at this time...

CVE-2020-15915 -- Quest for KACE blind SQLi

At Akamai, the Enterprise Security Red Team ESRT continuously strives to evaluate the security of both our external and internal services...

Quest KACE System Management Appliance Unauthorized Access (CVE-2018-11138)

A command execution vulnerability exists in Quest kace system management appliance 8.0.318. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Quest Software KACE K1000 Systems Management Appliance Code Execution Vulnerability

The Quest Software KACE K1000 Systems Management Appliance KACE SMA is a systems management appliance from Quest Software, USA. A security vulnerability exists in the service/krashrpt.php file in Quest Software KACE SMA versions prior to 6.4 SP3 6.4.120822. A remote attacker can exploit the...

CVE-2019-20504

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 6.4.120822 allows a remote attacker to execute code via shell metacharacters in the kuid parameter...

CVE-2019-20504

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 6.4.120822 allows a remote attacker to execute code via shell metacharacters in the kuid parameter...

Code injection

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 6.4.120822 allows a remote attacker to execute code via shell metacharacters in the kuid parameter...

CVE-2019-20504

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 6.4.120822 allows a remote attacker to execute code via shell metacharacters in the kuid parameter...

CVE-2019-20504

CVE-2019-20504 affects Quest/KACE K1000 SMA prior to 6.4 SP3 (6.4.120822). The vulnerability is in service/krashrpt.php, where shell metacharacters in the kuid parameter enable remote code execution. Impact is unauthenticated, full server compromise with high secrecy/integrity/availability impact...

hq-kace-sma.cohesity.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1047621 Security Researcher geeknik Helped patch 8710 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting hq-kace-sma.cohesity.com...

Quest Software KACE Systems Management Appliance Server Center Cross-Site Scripting Vulnerability (CNVD-2020-20168)

Quest Software KACE Systems Management Appliance SMA is a systems management appliance from Quest Software, USA. It supports IT asset management, server management and monitoring, software license management, patch management, etc. Server Center is one of the help desk programs. A cross-site...

Quest Software KACE Systems Management Appliance Server Center Cross-Site Scripting Vulnerability (CNVD-2020-20167)

Quest Software KACE Systems Management Appliance SMA is a systems management appliance from Quest Software, USA. It supports IT asset management, server management and monitoring, software license management, patch management, etc. Server Center is one of the help desk programs. A cross-site...