CVE-2021-44028: Quest KACE Desktop Authority

Medium severity, CVSS 5.5. EPSS: 3% chance of exploitation in the next 30 days.

XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285.

Affected products

• Quest KACE Desktop Authority: from 10.0, before 11.2 (fixed in 11.2)

Published 2021-12-22. Last modified 2026-06-17.