CVE-2019-13078

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection

published November 6, 2019

CVSS
—
EPSS
1%
Percentile
68.8
In the wild
Unconfirmed
What it is

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /common/user_profile.php. The affected parameter is sort_column.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01235 · 68.8th percentile
Published
2019-11-06T14:52Z
EPSS history
Timeline
  • 06 NOV 14:52Z
    Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection
    cvelistv5