CVE-2019-12917: Quest KACE Systems Management Appliance

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

A reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server Center 9.1.317 affecting the userui/software_library.php component via the PATH_INFO.

Affected products

• Quest KACE Systems Management Appliance: version 9.1.317 only

Published 2019-11-06. Last modified 2026-06-17.