medium5.4
CVE-2019-13081
Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the title field in the /common/ticket_associated_tickets.php servic…
Impact
Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the title field in the /common/ticket_associated_tickets.php service desk ticket functionality) that allows an authenticated user to execute arbitrary JavaScript in a service desk user's browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quest | Kace Systems Management Appliance | Version 9.1.317 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.quest.com/kb/311388/quest-response-to-certezza-vulnerability-report
- https://www.quest.com/products/kace-systems-management-appliance/
- https://support.quest.com/kb/311388/quest-response-to-certezza-vulnerability-report
- https://www.quest.com/products/kace-systems-management-appliance/