Product by Quest

    Quest KACE Systems Management Appliance

    22 known vulnerabilities in Quest KACE Systems Management Appliance (Quest), 1 of them actively exploited (CISA KEV).

    Key figures

    22

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Quest KACE Systems Management Appliance (Quest)
    CriticalCVE-2025-32975

    Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

    In CISA KEV

    		10.0
    HighCVE-2019-10973

    Quest KACE: Improper Input Validation

    		7.2
    CriticalCVE-2022-29807

    Quest KACE Systems Management Appliance: SQL Injection

    		9.8
    CriticalCVE-2021-32084

    Quest KACE Systems Management Appliance: security vulnerability

    		9.8
    CriticalCVE-2017-12567

    Quest KACE Asset Management Appliance: SQL Injection

    		9.8
    CriticalCVE-2021-32088

    Quest KACE Systems Management Appliance: security vulnerability

    		9.8
    HighCVE-2019-13079

    Quest KACE Systems Management Appliance: SQL Injection

    		8.8
    HighCVE-2019-13078

    Quest KACE Systems Management Appliance: SQL Injection

    		8.8
    HighCVE-2019-13076

    Quest KACE Systems Management Appliance: SQL Injection

    		8.8
    CriticalCVE-2019-12918

    Quest KACE Systems Management Appliance: SQL Injection

    		9.8
    HighCVE-2021-32087

    Quest KACE Systems Management Appliance: security vulnerability

    		8.8
    HighCVE-2021-32085

    Quest KACE Systems Management Appliance: security vulnerability

    		8.8
    MediumCVE-2019-11604

    Quest KACE Systems Management Appliance: Cross-Site Scripting (XSS)

    		6.1
    CriticalCVE-2021-32086

    Quest KACE Systems Management Appliance: Privilege Escalation

    		9.8
    CriticalCVE-2022-30285

    Quest KACE Systems Management Appliance: security vulnerability

    		9.8
    HighCVE-2022-29808

    Quest KACE Systems Management Appliance: security vulnerability

    		7.5
    MediumCVE-2019-13077

    Quest KACE Systems Management Appliance: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2019-12917

    Quest KACE Systems Management Appliance: Cross-Site Scripting (XSS)

    		6.1
    CriticalCVE-2025-26850

    Quest KACE Systems Management Appliance: Incorrect Authorization

    		9.3
    MediumCVE-2022-38220

    Quest KACE Systems Management Appliance: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2019-13081

    Quest KACE Systems Management Appliance: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2019-13080

    Quest KACE Systems Management Appliance: Cross-Site Scripting (XSS)

    		5.4

    News

    All products by Quest