Quest - vulnerabilities (CVEs)

154 CVEs in 79 products, 0 in the last 30 days, newest from 2026-07-27.

Products

• Disk Backup - 52 CVEs
• Netvault Backup - 35 CVEs
• Kace Systems Management Appliance - 25 CVEs
• Quest Netvault Backup - 24 CVEs
• Policy Authority For Unified Communications - 13 CVEs
• Kace System Management Appliance - 11 CVEs
• Kace Desktop Authority - 5 CVEs
• Kace Systems Management Appliance Firmware - 3 CVEs
• Intrust - 2 CVEs
• Coexistence Manager For Notes - 1 CVEs
• Foglight Evolve - 1 CVEs
• K1000 As A Service - 1 CVEs
• Kace Asset Management Appliance - 1 CVEs
• Kace Systems Deployment Appliance - 1 CVEs
• Kace Systems Management - 1 CVEs
• One Identity - 1 CVEs
• Privilege Manager - 1 CVEs
• Privilege Manager For Unix - 1 CVEs
• Toad For Data Analysts - 1 CVEs
• Activeroles Management Shell For Active Directory - 0 CVEs
• Application Integration Tool - 0 CVEs
• Benchmark Factory For Databases - 0 CVEs
• Big Brother System And Network Monitor Client - 0 CVEs
• Capacity Manager For Oracle - 0 CVEs
• Installer Logging - 0 CVEs
• Intrust Administrative Report Pack - 0 CVEs
• Intrust Agent - 0 CVEs
• Intrust Indexing Tool - 0 CVEs
• Intrust Knowledge Pack For Cisco Pix Firewall And Checkpoint Firewall - 0 CVEs
• Intrust Knowledge Pack For Hpux - 0 CVEs
• Intrust Knowledge Pack For Microsoft Audit Collection Services - 0 CVEs
• Intrust Knowledge Pack For Microsoft Excel - 0 CVEs
• Intrust Knowledge Pack For Microsoft Exchange Server - 0 CVEs
• Intrust Knowledge Pack For Microsoft Identity Integration Server - 0 CVEs
• Intrust Knowledge Pack For Microsoft Iis - 0 CVEs
• Intrust Knowledge Pack For Microsoft Isa Server - 0 CVEs
• Intrust Knowledge Pack For Microsoft Sql Server - 0 CVEs
• Intrust Knowledge Pack For Oracle Database - 0 CVEs
• Intrust Knowledge Pack For Redhat Enterprise Linux And Suse Linux Enterprise Server - 0 CVEs
• Intrust Knowledge Pack For Sun Solaris - 0 CVEs
• Intrust Manager - 0 CVEs
• Intrust Monitoring Console - 0 CVEs
• Intrust Predefined Objects For Microsoft Iis - 0 CVEs
• Intrust Report Pack For Excel - 0 CVEs
• Intrust Report Pack For Firewalls - 0 CVEs
• Intrust Report Pack For Hp-ux - 0 CVEs
• Intrust Report Pack For Iis - 0 CVEs
• Intrust Report Pack For Isas - 0 CVEs
• Intrust Report Pack For Linux - 0 CVEs
• Intrust Report Pack For Miis - 0 CVEs
• Intrust Report Pack For Ms Sql Server - 0 CVEs
• Intrust Report Pack For Oracle - 0 CVEs
• Intrust Report Pack For Quest Recovery Manager For Active Directory - 0 CVEs
• Intrust Report Pack For Solaris - 0 CVEs
• Intrust Report Pack For Suse Linux - 0 CVEs
• Intrust Report Pack For Syslog - 0 CVEs
• Intrust Report Pack For Windows - 0 CVEs
• Intrust Repository Viewer - 0 CVEs
• Intrust Resource Kit - 0 CVEs
• Intrust Server - 0 CVEs
• Knowledge Portal - 0 CVEs
• Knowledge Xpert - 0 CVEs
• Knowledge Xpert For Oracle Administration - 0 CVEs
• Knowledge Xpert For Plsql - 0 CVEs
• Knowledge Xpert Oracle Common - 0 CVEs
• Litespeed For Sql Server - 0 CVEs
• Messagestats - 0 CVEs
• Messagestats Report Pack For Blackberry - 0 CVEs
• Powergui - 0 CVEs
• Qexplain - 0 CVEs
• Spotlight - 0 CVEs
• Spotlight On Oracle - 0 CVEs
• Sql Optimizer For Oracle - 0 CVEs
• Sql Optimizer For Oracle Common - 0 CVEs
• Toad Data Modeler - 0 CVEs
• Toad For Oracle - 0 CVEs
• Toad For Sql Server - 0 CVEs
• Toad Group Policy Manager - 0 CVEs
• Web Parts For Sharepoint - 0 CVEs

Newest CVEs of Quest

• CVE-2021-32084 - CVSS 9.8 (critical), 2026-07-27: An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. If a customer restricts access to the web console by IP address or subnets,…
• CVE-2021-32087 - CVSS 8.8 (high), 2026-07-27: An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The kbftp account has a password…
• CVE-2021-32086 - CVSS 9.8 (critical), 2026-07-27: An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encryption key to encrypt secrets in the…
• CVE-2021-32085 - CVSS 8.8 (high), 2026-07-27: An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The report and R1 MySQL accounts…
• CVE-2021-32088 - CVSS 9.8 (critical), 2026-07-27: An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a…
• CVE-2026-7569 - CVSS 8.8 (high), 2026-06-24: Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication…
• CVE-2026-9787 - CVSS 8.8 (high), 2026-06-24: Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
• CVE-2026-9786 - CVSS 8.8 (high), 2026-06-24: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
• CVE-2026-9785 - CVSS 8.8 (high), 2026-06-24: Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
• CVE-2026-9784 - CVSS 8.8 (high), 2026-06-24: Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
• CVE-2026-9783 - CVSS 8.8 (high), 2026-06-24: Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
• CVE-2026-9782 - CVSS 8.8 (high), 2026-06-24: Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
• CVE-2026-9781 - CVSS 8.8 (high), 2026-06-24: Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
• CVE-2026-9780 - CVSS 8.8 (high), 2026-06-24: Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication…
• CVE-2026-7570 - CVSS 8.8 (high), 2026-06-24: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
• CVE-2025-67813 - CVSS 5.3 (medium), 2026-01-12: Quest KACE Desktop Authority through 11.3.1 has Insecure Permissions on the Named Pipes used for inter-process communication
• CVE-2025-12874 - CVSS 6.3 (medium), 2025-12-19: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Quest Coexistence Manager for Notes (Free/Busy Connector…
• CVE-2025-56689 - CVSS 4.6 (medium), 2025-09-03: One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password (OTP)/Multifactor Authentication (MFA)…
• CVE-2025-26850 - CVSS 9.3 (critical), 2025-07-05: The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems.
• CVE-2025-32975 - CVSS 10 (critical), 2025-06-24: Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and…
• CVE-2024-23774 - CVSS 7.8 (high), 2024-04-30: An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe…
• CVE-2024-23773 - CVSS 7.8 (high), 2024-04-30: An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file delete vulnerability exists in the KSchedulerSvc.exe…
• CVE-2024-23772 - CVSS 6.6 (medium), 2024-04-30: An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file create vulnerability exists in the KSchedulerSvc.exe,…
• CVE-2023-33254 - CVSS 6.5 (medium), 2023-05-21: There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may provide a higher…
• CVE-2022-38220 - CVSS 6.1 (medium), 2023-03-01: An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote injection of arbitrary web script or HTML.
• CVE-2022-29807 - CVSS 9.8 (critical), 2022-08-02: A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via…
• CVE-2022-30285 - CVSS 9.8 (critical), 2022-08-02: In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication. This may allow authentication with invalid…
• CVE-2022-29808 - CVSS 7.5 (high), 2022-08-02: In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linking is enabled.
• CVE-2021-44030 - CVSS 6.1 (medium), 2021-12-22: Quest KACE Desktop Authority before 11.2 allows XSS because it does not prevent untrusted HTML from reaching the jQuery.htmlPrefilter method of jQuery.
• CVE-2021-44029 - CVSS 9.8 (critical), 2021-12-22: An issue was discovered in Quest KACE Desktop Authority before 11.2. This vulnerability allows attackers to execute remote code through a deserialization…