CVE-2019-12918
CRITICALQuest KACE Systems Management Appliance 9.1.317 - SQL Injection via software_library.php order Parameters
Title source: llmDescription
Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL injection. The affected file is software_library.php and affected parameters are order[0][column] and order[0][dir].
References (2)
Core 2
Core References
Product x_refsource_misc
https://www.quest.com/products/kace-systems-management-appliance/
Vendor Advisory x_refsource_misc
https://support.quest.com/kb/311388/quest-response-to-certezza-vulnerability-report
Scores
CVSS v3
9.8
EPSS
0.0105
EPSS Percentile
60.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
quest/kace_systems_management_appliance
9.1.317
Published
Nov 06, 2019
Tracked Since
Feb 18, 2026