VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Nov 6, 2019· Updated Jun 17, 2026

CVE-2019-13081

CVE-2019-13081

Description

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the title field in the /common/ticket_associated_tickets.php service desk ticket functionality) that allows an authenticated user to execute arbitrary JavaScript in a service desk user's browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Quest/Kace Systems Management Appliance2 versions
    cpe:2.3:a:quest:kace_systems_management_appliance:9.1.317:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:quest:kace_systems_management_appliance:9.1.317:*:*:*:*:*:*:*
    • (no CPE)range: 9.1.317
  • Quest/KACE Systems Management Appliance Server Centerdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.