CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. Its EPSS score suggests a 42.9% probability of exploitation in the next 30 days. Exploitation may require the attacker to be authenticated.
CVE
CVE-2018-11139
Severity
HIGH
CVSS
8.8
EPSS
42.92%
Original NVD Description
The '/common/ajax_email_connection_test.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any authenticated user and can be abused to execute arbitrary commands on the system. This script is vulnerable to command injection via the unsanitized user input 'TEST_SERVER' sent to the script via the POST method.
Related CVEs
Other vulnerabilities affecting the same vendor(s)