CVE-2022-38220

An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote injection of arbitrary web script or HTML.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2023-03-01

Last modified

2025-03-18

Weaknesses

CWE-79

Affected products

• Kace Systems Management Appliance (Quest)

References

• https://support.quest.com/kb/339613
• https://support.quest.com/kb/4368602/quest-response-to-kace-sma-vulnerability-cve-2022-38220