quest kace-system-management-appliance CVE-2018-11140 is a vulnerability in Quest Software Kace System Management Appliance
Published on May 31, 2018

The 'reportID' parameter received by the '/common/run_report.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, an error-based type).

NVD


Products Associated with CVE-2018-11140

Want to know whenever a new CVE is published for Quest Software Kace System Management Appliance? stack.watch will email you.

Quest Software Kace System Management Appliance
 

Exploit Probability

EPSS
0.31%
Percentile
53.85%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.