Kace Systems Management Appliance
Approved changes feed: RSS · Atom
cpe:2.3:a:quest:kace_systems_management_appliance:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Quest (91a9bf17-30f5-5671-ad35-2f5777bc4995) |
|---|---|
| Product | Kace Systems Management Appliance (a52d0acc-247d-51b1-8382-6e06c05af917) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-32975 |
vulnerable | 2026-06-08 07:19:01.261292 |
Details available
Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid credentials. The vulnerability exists in the SSO authentication handling mechanism and can lead to complete administrative takeover.
Published: 2025-06-24T00:00:00.000Z
Updated: 2026-04-21T03:55:39.782Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26850 |
vulnerable | 2026-06-08 07:14:50.561197 |
Details available
CRITICAL (9.3)
The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems.
Published: 2025-07-04T00:00:00.000Z
Updated: 2025-07-08T14:36:07.987Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23774 |
vulnerable | 2026-06-08 06:29:40.426024 |
Details available
An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges.
Published: 2024-04-30T00:00:00.000Z
Updated: 2024-08-01T23:13:07.423Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23773 |
vulnerable | 2026-06-08 06:29:40.425549 |
Details available
An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file delete vulnerability exists in the KSchedulerSvc.exe component. Local attackers can delete any file of their choice with NT Authority\SYSTEM privileges.
Published: 2024-04-30T00:00:00.000Z
Updated: 2024-08-01T23:13:07.566Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23772 |
vulnerable | 2026-06-08 06:29:40.424978 |
Details available
An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file create vulnerability exists in the KSchedulerSvc.exe, KUserAlert.exe, and Runkbot.exe components. This allows local attackers to create any file of their choice with NT Authority\SYSTEM privileges.
Published: 2024-04-30T00:00:00.000Z
Updated: 2024-08-09T20:52:13.632Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38220 |
vulnerable | 2026-06-08 05:47:16.047747 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30285 |
vulnerable | 2026-06-08 05:43:37.833408 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29808 |
vulnerable | 2026-06-08 05:42:48.857376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29807 |
vulnerable | 2026-06-08 05:42:48.857003 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11604 |
vulnerable | 2026-06-08 05:12:37.718283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10973 |
vulnerable | 2026-06-08 05:12:26.109406 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.