CVE-2018-11136 is a vulnerability in Quest Software Kace System Management Appliance
Published on May 31, 2018
The 'orgID' parameter received by the '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, a blind time-based type).
Products Associated with CVE-2018-11136
Want to know whenever a new CVE is published for Quest Software Kace System Management Appliance? stack.watch will email you.
Exploit Probability
EPSS
0.31%
Percentile
53.88%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.