CVE-2019-13076

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection

published November 6, 2019

CVSS
—
EPSS
1%
Percentile
68.8
In the wild
Unconfirmed
What it is

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticket_list.php, and affected parameters are order[0][column] and order[0][dir].

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01235 · 68.8th percentile
Published
2019-11-06T14:49Z
EPSS history
Timeline
  • 06 NOV 14:49Z
    Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection
    cvelistv5