Vendor CVEs

Quest

All CVEs

157 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-11182	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 40 of 46).
CVE-2018-11181	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46).
CVE-2018-11180	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46).
CVE-2018-11179	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).
CVE-2018-11178	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).
CVE-2018-11177	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).
CVE-2018-11176	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).
CVE-2018-11175	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).
CVE-2018-11174	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46).
CVE-2018-11173	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46).
CVE-2018-11172	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46).
CVE-2018-11171	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46).
CVE-2018-11170	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).
CVE-2018-11169	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46).
CVE-2018-11168	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46).
CVE-2018-11167	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46).
CVE-2018-11166	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46).
CVE-2018-11165	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46).
CVE-2018-11164	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46).
CVE-2018-11162	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46).
CVE-2018-11161	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46).
CVE-2018-11160	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 18 of 46).
CVE-2018-11159	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 17 of 46).
CVE-2018-11158	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 16 of 46).
CVE-2018-11157	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 15 of 46).
CVE-2018-11156	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 14 of 46).
CVE-2018-11155	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 13 of 46).
CVE-2018-11154	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 12 of 46).
CVE-2018-11153	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 11 of 46).
CVE-2018-11152	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 10 of 46).
CVE-2018-11150	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 8 of 46).
CVE-2018-11149	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46).
CVE-2018-11148	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 6 of 46).
CVE-2018-11147	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 5 of 46).
CVE-2018-11146	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 4 of 46).
CVE-2018-11145	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 3 of 46).
CVE-2018-11144	Quest Disk Backup	Hig	0.58	8.8	0.05	Jun 2, 2018	Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 2 of 46).
CVE-2026-9787	Quest Netvault Backup	Hig	0.57	8.8	0.01	Jun 25, 2026	Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability,…
CVE-2026-9786	Quest Netvault Backup	Hig	0.57	8.8	0.01	Jun 25, 2026	Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the…
CVE-2026-9785	Quest Netvault Backup	Hig	0.57	8.8	0.01	Jun 25, 2026	Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability,…
CVE-2026-9784	Quest Netvault Backup	Hig	0.57	8.8	0.01	Jun 25, 2026	Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability,…
CVE-2026-9783	Quest Netvault Backup	Hig	0.57	8.8	0.01	Jun 25, 2026	Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability,…
CVE-2026-9782	Quest Netvault Backup	Hig	0.57	8.8	0.01	Jun 25, 2026	Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability,…
CVE-2026-9781	Quest Netvault Backup	Hig	0.57	8.8	0.01	Jun 25, 2026	Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the…
CVE-2026-9780	Quest Netvault Backup	Hig	0.57	8.8	0.01	Jun 25, 2026	Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that…
CVE-2026-7570	Quest Netvault Backup	Hig	0.57	8.8	0.01	Jun 25, 2026	Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the…
CVE-2026-7569	Quest Netvault Backup	Hig	0.57	8.8	0.01	Jun 25, 2026	Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that…
CVE-2025-32976	Quest Kace Systems Management Appliance	Hig	0.57	8.8	0.01	Jun 24, 2025	Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains a logic flaw in its two-factor authentication implementation that allows…
CVE-2019-13079	Quest Kace Systems Management Appliance	Hig	0.57	8.8	0.01	Nov 6, 2019	Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /adminui/history_log.php. The affected parameter is TYPE_NAME.
CVE-2019-13078	Quest Kace Systems Management Appliance	Hig	0.57	8.8	0.01	Nov 6, 2019	Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /common/user_profile.php. The affected parameter is sort_column.

CVE-2018-11182HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 40 of 46).
CVE-2018-11181HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46).
CVE-2018-11180HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46).
CVE-2018-11179HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).
CVE-2018-11178HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).
CVE-2018-11177HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).
CVE-2018-11176HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).
CVE-2018-11175HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).
CVE-2018-11174HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46).
CVE-2018-11173HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46).
CVE-2018-11172HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46).
CVE-2018-11171HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46).
CVE-2018-11170HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).
CVE-2018-11169HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46).
CVE-2018-11168HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46).
CVE-2018-11167HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46).
CVE-2018-11166HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46).
CVE-2018-11165HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46).
CVE-2018-11164HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46).
CVE-2018-11162HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46).
CVE-2018-11161HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46).
CVE-2018-11160HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 18 of 46).
CVE-2018-11159HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 17 of 46).
CVE-2018-11158HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 16 of 46).
CVE-2018-11157HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 15 of 46).
CVE-2018-11156HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 14 of 46).
CVE-2018-11155HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 13 of 46).
CVE-2018-11154HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 12 of 46).
CVE-2018-11153HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 11 of 46).
CVE-2018-11152HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 10 of 46).
CVE-2018-11150HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 8 of 46).
CVE-2018-11149HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46).
CVE-2018-11148HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 6 of 46).
CVE-2018-11147HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 5 of 46).
CVE-2018-11146HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 4 of 46).
CVE-2018-11145HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 3 of 46).
CVE-2018-11144HigJun 2, 2018
Quest
Disk Backup
risk 0.58cvss 8.8epss 0.05
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 2 of 46).
CVE-2026-9787HigJun 25, 2026
Quest
Netvault Backup
risk 0.57cvss 8.8epss 0.01
Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability,…
CVE-2026-9786HigJun 25, 2026
Quest
Netvault Backup
risk 0.57cvss 8.8epss 0.01
Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the…
CVE-2026-9785HigJun 25, 2026
Quest
Netvault Backup
risk 0.57cvss 8.8epss 0.01
Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability,…
CVE-2026-9784HigJun 25, 2026
Quest
Netvault Backup
risk 0.57cvss 8.8epss 0.01
Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability,…
CVE-2026-9783HigJun 25, 2026
Quest
Netvault Backup
risk 0.57cvss 8.8epss 0.01
Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability,…
CVE-2026-9782HigJun 25, 2026
Quest
Netvault Backup
risk 0.57cvss 8.8epss 0.01
Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability,…
CVE-2026-9781HigJun 25, 2026
Quest
Netvault Backup
risk 0.57cvss 8.8epss 0.01
Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the…
CVE-2026-9780HigJun 25, 2026
Quest
Netvault Backup
risk 0.57cvss 8.8epss 0.01
Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that…
CVE-2026-7570HigJun 25, 2026
Quest
Netvault Backup
risk 0.57cvss 8.8epss 0.01
Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the…
CVE-2026-7569HigJun 25, 2026
Quest
Netvault Backup
risk 0.57cvss 8.8epss 0.01
Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that…
CVE-2025-32976HigJun 24, 2025
Quest
Kace Systems Management Appliance
risk 0.57cvss 8.8epss 0.01
Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains a logic flaw in its two-factor authentication implementation that allows…
CVE-2019-13079HigNov 6, 2019
Quest
Kace Systems Management Appliance
risk 0.57cvss 8.8epss 0.01
Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /adminui/history_log.php. The affected parameter is TYPE_NAME.
CVE-2019-13078HigNov 6, 2019
Quest
Kace Systems Management Appliance
risk 0.57cvss 8.8epss 0.01
Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /common/user_profile.php. The affected parameter is sort_column.

Page 2 of 4