Kace System Management Appliance Security Vulnerabilities and Issues — Kace System Management Appliance CVE List

Lucene search

QuestKace System Management Appliance

2 matches found

CVE•added 2018/05/31 6:29 p.m.•62 views

CVE-2018-11133

The 'fmt' parameter of the '/common/run_cross_report.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting.

6.1CVSS6.4AI score0.00342EPSS

CVE•added 2018/05/31 6:29 p.m.•41 views

CVE-2018-11137

The 'checksum' parameter of the '/common/download_attachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www' privileges via Directory Traversal. No administrator privileges are needed to execute this script.

6.5CVSS7AI score0.00467EPSS