CVE-2018-11135: Quest KACE System Management Appliance

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

The script '/adminui/error_details.php' in the Quest KACE System Management Appliance 8.0.318 allows authenticated users to conduct PHP object injection attacks.

Affected products

• Quest KACE System Management Appliance: version 8.0.318 only

Published 2018-05-31. Last modified 2026-06-17.