Lucene search

K
cvelistMitreCVELIST:CVE-2018-11140
HistoryMay 31, 2018 - 6:00 p.m.

CVE-2018-11140

2018-05-3118:00:00
mitre
www.cve.org

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.9%

The ‘reportID’ parameter received by the ‘/common/run_report.php’ script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, an error-based type).

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.9%

Related for CVELIST:CVE-2018-11140