XSS Vulnerability in Quest KACE Systems Management Appliance
CVE-2019-13077

6.1MEDIUM

Key Information:

Vendor: Quest
Status: Kace Systems Management Appliance
Vendor: CVE Published:; 6 November 2019

What is CVE-2019-13077?

The Quest KACE Systems Management Appliance Server Center 9.1.317 is susceptible to a Cross-Site Scripting (XSS) vulnerability, triggered via the 'sam_detail_titled.php' SAM_TYPE parameter. This security flaw allows attackers to craft a malicious link that, when clicked by an authenticated user, executes arbitrary scripts in their web browser. As a result, sensitive information may be exposed, and unauthorized actions could be performed on behalf of the user. Mitigating this vulnerability is crucial to safeguarding user data and maintaining the overall security of the affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch