Medium severity6.1NVD Advisory· Published May 31, 2018· Updated Jun 17, 2026

CVE-2018-11133

Description

The 'fmt' parameter of the '/common/run_cross_report.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting.

Affected products

Quest/Kace Systems Management Appliancellm-fuzzy
Range: 8.0.318

Patches

Vulnerability mechanics

References

www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilitiesnvdExploitTechnical DescriptionThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000