Dell KACE k1000 Systems Management Appliance vulnerabilities

2 CVEs affecting Dell KACE k1000 Systems Management Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0330, published 2014-02-06.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-0330, published 2014-02-06. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in adminui/user_list.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABEL_ID…
• CVE-2014-1671, published 2014-01-26. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress…