quest Vulnerability Advisory Catalog

Total 144 security vulnerabilities recorded for quest software and firmware.

← Back to All Vendors
Component: netvault_backup

Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbit...

📅 2026-06-25
CVSS 8.8 Dossier →
Component: netvault_backup

Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary...

📅 2026-06-25
CVSS 8.8 Dossier →
Component: netvault_backup

Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra...

📅 2026-06-25
CVSS 8.8 Dossier →
Component: netvault_backup

Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra...

📅 2026-06-25
CVSS 8.8 Dossier →
Component: netvault_backup

Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi...

📅 2026-06-25
CVSS 8.8 Dossier →
Component: netvault_backup

Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra...

📅 2026-06-25
CVSS 8.8 Dossier →
Component: netvault_backup

Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary...

📅 2026-06-25
CVSS 8.8 Dossier →
Component: netvault_backup

Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authen...

📅 2026-06-25
CVSS 8.8 Dossier →
Component: netvault_backup

Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary...

📅 2026-06-25
CVSS 8.8 Dossier →
Component: netvault_backup

Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authen...

📅 2026-06-25
CVSS 8.8 Dossier →
Component: kace_desktop_authority

Quest KACE Desktop Authority through 11.3.1 has Insecure Permissions on the Named Pipes used for inter-process communication...

📅 2026-01-12
CVSS 5.3 Dossier →
Component: one_identity

One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password (OTP)/Multifactor Authentication (MF...

📅 2025-09-03
CVSS 4.6 Dossier →
CVE-2025-32975 CRITICAL
Component: kace_systems_management_appliance

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5),...

📅 2025-06-24
CVSS 10.0 Dossier →
Component: kace_systems_deployment_appliance

There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may provide a highe...

📅 2023-05-21
CVSS 6.5 Dossier →
Component: kace_systems_management_appliance

An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote injection of arbitrary web script ...

📅 2023-03-01
CVSS 6.1 Dossier →
CVE-2022-30285 CRITICAL
Component: kace_systems_management_appliance

In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication. This may allow authentication with ...

📅 2022-08-02
CVSS 9.8 Dossier →
Component: kace_systems_management_appliance

In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linking is enabled....

📅 2022-08-02
CVSS 7.5 Dossier →
CVE-2022-29807 CRITICAL
Component: kace_systems_management_appliance

A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via do...

📅 2022-08-02
CVSS 9.8 Dossier →
CVE-2021-44031 CRITICAL
Component: kace_desktop_authority

An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a ...

📅 2021-12-22
CVSS 9.8 Dossier →
Component: kace_desktop_authority

Quest KACE Desktop Authority before 11.2 allows XSS because it does not prevent untrusted HTML from reaching the jQuery.htmlPrefilter method of jQuery...

📅 2021-12-22
CVSS 6.1 Dossier →
CVE-2021-44029 CRITICAL
Component: kace_desktop_authority

An issue was discovered in Quest KACE Desktop Authority before 11.2. This vulnerability allows attackers to execute remote code through a deserializat...

📅 2021-12-22
CVSS 9.8 Dossier →
Component: kace_desktop_authority

XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue t...

📅 2021-12-22
CVSS 5.5 Dossier →
Component: policy_authority_for_unified_communications

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to th...

📅 2021-01-11
CVSS 5.4 Dossier →
Component: policy_authority_for_unified_communications

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to th...

📅 2021-01-11
CVSS 6.1 Dossier →
Page 1 of 6 (144 Total Records)