CVE-2022-38220: Quest KACE Systems Management Appliance

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote injection of arbitrary web script or HTML.

Affected products

• Quest KACE Systems Management Appliance: up to and including 12.1

Published 2023-03-01. Last modified 2026-06-17.