Critical severity9.8NVD Advisory· Published Aug 2, 2022· Updated Jun 17, 2026

CVE-2022-29807

Description

A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via download_agent_installer.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Quest/Kace Systems Management Appliancecpe-rescue3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:quest:kace_systems_management_appliance:*:*:*:*:*:*:*:*range: <12.1.168
- (no CPE)range: <=12.0

Patches

Vulnerability mechanics

References

support.quest.com/kace-systems-management-appliance/kb/338162/quest-response-to-kace-sma-vulnerabilities-cve-2022-29807nvdVendor Advisory
support.quest.com/kb/338162nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000