CVE-2018-11133: Quest KACE System Management Appliance

Medium severity, CVSS 6.1. EPSS: 8.6% chance of exploitation in the next 30 days.

The 'fmt' parameter of the '/common/run_cross_report.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting.

Affected products

• Quest KACE System Management Appliance: version 8.0.318 only

Published 2018-05-31. Last modified 2026-06-17.