Vulnerabilities > Quest > Kace Desktop Authority > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-12-22 CVE-2021-44028 XXE vulnerability in Quest Kace Desktop Authority
XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285.
local
low complexity
quest CWE-611
5.5
5.5
2021-12-22 CVE-2021-44030 Cross-site Scripting vulnerability in Quest Kace Desktop Authority
Quest KACE Desktop Authority before 11.2 allows XSS because it does not prevent untrusted HTML from reaching the jQuery.htmlPrefilter method of jQuery.
network
low complexity
quest CWE-79
6.1
6.1