CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It involves a SQL injection risk.
CVE
CVE-2018-11140
Severity
CRITICAL
CVSS
9.8
EPSS
1.39%
Original NVD Description
The 'reportID' parameter received by the '/common/run_report.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, an error-based type).
Related CVEs
Other vulnerabilities affecting the same vendor(s)