Quest Vulnerabilità

Sequenza temporale

Genere

Backup Software	75
Endpoint Management Software	34
Not Defined	22
Programming Language Software	1
iOS App Software	1

Prodotto

Quest DR Series Disk Backup	52
Quest NetVault Backup	23
Quest Policy Authority	13
Quest KACE System Management Appliance	10
Quest KACE Systems Management Appliance Server Cen ...	8

Contromisure

Official Fix	86
Temporary Fix	0
Workaround	13
Unavailable	2
Not Defined	32

Sfruttabilità

High	4
Functional	0
Proof-of-Concept	3
Unproven	1
Not Defined	125

Accesso al vettore

Not Defined	0
Physical	0
Local	2
Adjacent	4
Network	127

Autenticazione

Not Defined	0
High	5
Low	82
None	46

Interazione dell'utente

Not Defined	0
Required	21
None	112

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	1
≤4	1
≤5	18
≤6	11
≤7	4
≤8	59
≤9	37
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	1
≤5	18
≤6	12
≤7	5
≤8	58
≤9	36
≤10	2

VulDB

≤1	0
≤2	0
≤3	1
≤4	18
≤5	12
≤6	3
≤7	56
≤8	38
≤9	3
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	10
≤7	14
≤8	6
≤9	56
≤10	38

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fornitore

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	17
<2k	77
<5k	39
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	132
<2k	1
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (23): DR Series Disk Backup (52), Foglight Evolve (1), IQCRM (1), Image Racer (1), InTrust (2), Information Systems Indiana Voters App (1), JavaMelody (1), K1000 as a Service (1), KACE (1), KACE Asset Management Appliance (1), KACE Desktop Authority (4), KACE System Management Appliance (10), KACE System Management Virtual Appliance (1), KACE Systems Management Appliance (5), KACE Systems Management Appliance Server Center (8), Kace K1000 (3), Kace K1000 Systems Management Appliance (1), NetVault Backup (23), Policy Authority (13), Privilege Manager (2), Systems Management Appliance (1), ThinkPHP (1), Toad for Data Analysts (1)

Data di pubblicazione	Base	Temp	Vulnerabilità	Prod	Sfr	Con	EPSS	CTI	CVE
22/01/2024	8.0	7.9	Quest Analytics IQCRM WSDL Page Common.svc sql injection	Sconosciuto	Not Defined	Not Defined	0.00256	0.02	CVE-2023-48118
01/03/2023	4.8	4.8	Quest KACE Systems Management Appliance cross site scripting	Endpoint Management Software	Not Defined	Not Defined	0.00073	0.00	CVE-2022-38220
03/08/2022	8.0	8.0	Quest KACE Systems Management Appliance autenticazione debole	Endpoint Management Software	Not Defined	Not Defined	0.00221	0.00	CVE-2022-30285
03/08/2022	2.6	2.6	Quest KACE Systems Management Appliance Appliance Linking crittografia debole	Endpoint Management Software	Not Defined	Not Defined	0.00158	0.00	CVE-2022-29808
03/08/2022	8.0	8.0	Quest KACE Systems Management Appliance download_agent_installer.php sql injection	Endpoint Management Software	Not Defined	Not Defined	0.00185	0.00	CVE-2022-29807
22/12/2021	3.5	3.4	Quest KACE Desktop Authority jQuery jQuery.htmlPrefilter cross site scripting	Endpoint Management Software	Not Defined	Official Fix	0.00072	0.00	CVE-2021-44030
22/12/2021	5.5	5.3	Quest KACE Desktop Authority Log4net Configuration File XML External Entity	Endpoint Management Software	Not Defined	Official Fix	0.00061	0.00	CVE-2021-44028
22/12/2021	5.0	4.8	Quest KACE Desktop Authority RadAsyncUpload escalazione di privilegi	Endpoint Management Software	Not Defined	Official Fix	0.00730	0.00	CVE-2021-44029
22/12/2021	7.3	7.0	Quest KACE Desktop Authority Insertimage.aspx escalazione di privilegi	Endpoint Management Software	Not Defined	Official Fix	0.00487	0.00	CVE-2021-44031
11/01/2021	4.4	4.3	Quest Policy Authority BrowseDirs.do cross site scripting	Sconosciuto	Not Defined	Workaround	0.00068	0.00	CVE-2020-35727
11/01/2021	4.8	4.7	Quest Policy Authority index.jsp cross site scripting	Sconosciuto	Not Defined	Workaround	0.00122	0.00	CVE-2020-35726
11/01/2021	4.8	4.7	Quest Policy Authority index.jsp cross site scripting	Sconosciuto	Not Defined	Workaround	0.00122	0.00	CVE-2020-35725
11/01/2021	4.4	4.3	Quest Policy Authority Error.jsp cross site scripting	Sconosciuto	Not Defined	Workaround	0.00068	0.00	CVE-2020-35724
11/01/2021	4.4	4.3	Quest Policy Authority ReportPreview.do cross site scripting	Sconosciuto	Not Defined	Workaround	0.00068	0.00	CVE-2020-35723
11/01/2021	5.0	4.9	Quest Policy Authority Web Compliance Manager submitUser.jsp cross site request forgery	Sconosciuto	Not Defined	Workaround	0.00114	0.00	CVE-2020-35722
11/01/2021	4.4	4.3	Quest Policy Authority BrowseAssets.do cross site scripting	Sconosciuto	Not Defined	Workaround	0.00068	0.00	CVE-2020-35721
11/01/2021	4.4	4.3	Quest Policy Authority submitUser.jsp cross site scripting	Sconosciuto	Not Defined	Workaround	0.00068	0.00	CVE-2020-35720
11/01/2021	4.8	4.7	Quest Policy Authority index.jsp cross site scripting	Sconosciuto	Not Defined	Workaround	0.00122	0.00	CVE-2020-35719
11/01/2021	4.8	4.7	Quest Policy Authority Web Compliance Manager cConn.jsp cross site scripting	Sconosciuto	Not Defined	Workaround	0.00072	0.00	CVE-2020-35206
11/01/2021	6.6	6.5	Quest Policy Authority Web Compliance Manager initFile.jsp escalazione di privilegi	Sconosciuto	Not Defined	Workaround	0.00625	0.00	CVE-2020-35205
11/01/2021	4.8	4.7	Quest Policy Authority FolderControl.jsp cross site scripting	Sconosciuto	Not Defined	Workaround	0.00072	0.00	CVE-2020-35204
11/01/2021	4.8	4.7	Quest Policy Authority Web Compliance Manager initFile.jsp cross site scripting	Sconosciuto	Not Defined	Workaround	0.00072	0.00	CVE-2020-35203
23/03/2020	8.5	8.5	Quest Foglight Evolve autenticazione debole	Sconosciuto	Not Defined	Not Defined	0.13129	0.00	CVE-2020-8868
09/03/2020	8.5	8.4	Quest Kace K1000 Systems Management Appliance krashrpt.php escalazione di privilegi	Endpoint Management Software	Not Defined	Official Fix	0.04664	0.03	CVE-2019-20504
06/11/2019	4.4	4.4	Quest KACE Systems Management Appliance Server Center ticket_associated_tickets.php cross site scripting	Endpoint Management Software	Not Defined	Not Defined	0.00055	0.00	CVE-2019-13081

108 non vengono visualizzate più voci

🔒 Login Required

You need to signup and login to see more of the remaining 108 results.

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!