Vulnerabilities > Quest > Kace Systems Management Appliance Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-06-03 CVE-2018-5406 Permissions, Privileges, and Access Controls vulnerability in Quest Kace Systems Management Appliance Firmware
The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows a remote attacker to exploit the misconfigured Cross-Origin Resource Sharing (CORS) mechanism.
network
quest CWE-264
critical
9.3