CVE-2019-13081

—

CVSS 3.1

5.4 medium

EPSS

<1%p54

Published

Nov 6, 2019 (Nov 6, 2019)

Modified

Jun 17, 2026

Description

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the title field in the /common/ticket_associated_tickets.php service desk ticket functionality) that allows an authenticated user to execute arbitrary JavaScript in a service desk user's browser.

Vendors: quest
Products: kace systems management appliance
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.