CVE-2019-13079

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection

published November 6, 2019

CVSS
—
EPSS
1%
Percentile
68.8
In the wild
Unconfirmed
What it is

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /adminui/history_log.php. The affected parameter is TYPE_NAME.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01235 · 68.8th percentile
Published
2019-11-06T14:53Z
EPSS history
Timeline
  • 06 NOV 14:53Z
    Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection
    cvelistv5