CVE-2019-13080

—

CVSS 3.1

5.4 medium

EPSS

<1%p54

Published

Nov 6, 2019 (Nov 6, 2019)

Modified

Jun 17, 2026

Description

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via an SVG image and HTML file) that allows an authenticated user to execute arbitrary JavaScript in an administrator's browser.

Vendors: quest
Products: kace systems management appliance
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.