cbcvebase.

Quest Kace Systems Management vulnerabilities

1 known vulnerability affecting quest/kace_systems_management.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2019-20504P1CRITICALCVSS 9.8ExploitedPoCfixed in 6.4.1208222020-03-09
CVE-2019-20504 [CRITICAL] CWE-78 CVE-2019-20504: service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) al service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid parameter.
nvd
Quest Kace Systems Management vulnerabilities | cvebase