CVE-2022-29807

A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via download_agent_installer.php.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:quest:kace_systems_management_appliance:*:*:*:*:*:*:*:*

Information

Published : 2022-08-02 15:15

Updated : 2022-08-10 08:00


NVD link : CVE-2022-29807

Mitre link : CVE-2022-29807


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

quest

  • kace_systems_management_appliance