CVE-2025-32975

>= 13.0 and < 13.0.385

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before

10.0CRITICAL

CVE-2022-38220

<= 12.1

An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote injection of a

6.1MEDIUM

CVE-2022-30285

< 12.1.168

In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication. This may allow

9.8CRITICAL

CVE-2022-29808

< 12.1.168

In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linking is enabl

7.5HIGH

CVE-2022-29807

< 12.1.168

A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote c

9.8CRITICAL

CVE-2019-13081

all versions

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the title field in the /common/ticket_

5.4MEDIUM

CVE-2019-13080

all versions

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via an SVG image and HTML file) that allow

5.4MEDIUM

CVE-2019-13079

all versions

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the abilit

8.8HIGH

CVE-2019-13078

all versions

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the abilit

8.8HIGH

CVE-2019-13077

all versions

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the sam_detail_titled.php SAM_TYPE par

6.1MEDIUM

CVE-2019-13076

all versions

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the abilit

8.8HIGH

CVE-2019-12918

all versions

Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL injection. The affected file is softwar

9.8CRITICAL

CVE-2019-12917

all versions

A reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server Center 9.1.317 affecting the userui/softwar

6.1MEDIUM

CVE-2019-10973

>= 8.0.0 and <= 8.0.320

Quest KACE, all versions prior to version 8.0.x, 8.1.x, and 9.0.x, allows unintentional access to the appliance leveraging functio

7.2HIGH

CVE-2019-11604

< 9.1

An issue was discovered in Quest KACE Systems Management Appliance before 9.1. The script at /service/kbot_service_notsoap.php is

6.1MEDIUM

CVE-2017-12567

all versions

SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 thro

9.8CRITICAL