Lucene search

K
cvelistMitreCVELIST:CVE-2018-11136
HistoryMay 31, 2018 - 6:00 p.m.

CVE-2018-11136

2018-05-3118:00:00
mitre
www.cve.org
1

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.9%

The ‘orgID’ parameter received by the ‘/common/download_agent_installer.php’ script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, a blind time-based type).

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.9%

Related for CVELIST:CVE-2018-11136