Skip to content
Noroxi

Quest records

152 published records for vendor quest.

Researcher profile

Entered KEV
2 · 1.3%
Weaponized
4 · 2.6%
Pre-auth RCE
33
With a fix record
0%
Median publish → KEV
847 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

152 records
  • CVE-2018-11138
    97Now

    The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and

    CriticalCVSS 9.8KEVWeaponizedEPSS 92%

    quest · kace system management applianceMay 31, 2018

  • CVE-2025-32975
    71This week

    Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341

    CriticalCVSS 10.0KEVWeaponizedEPSS 2%

    quest · kace systems management applianceJun 24, 2025

  • CVE-2012-5896
    61This week

    The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Ad

    CriticalCVSS 10.0WeaponizedEPSS 69%

    quest · intrustNov 17, 2012

  • CVE-2018-1161
    59Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13.

    CriticalCVSS 9.8No exploitEPSS 67%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17420
    53Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 48%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-6553
    52Plan

    Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the polic

    CriticalCVSS 9.8WeaponizedEPSS 42%

    quest · privilege manager for unixApr 29, 2017

  • CVE-2018-11143
    50Plan

    Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46).

    CriticalCVSS 9.8No exploitEPSS 37%

    quest · disk backupJun 1, 2018

  • CVE-2018-11139
    48Plan

    The '/common/ajax_email_connection_test.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any authenticated

    HighCVSS 8.8No exploitEPSS 43%

    quest · kace system management applianceMay 31, 2018

  • CVE-2018-1163
    44Plan

    This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup 11.2.0.13.

    CriticalCVSS 9.8No exploitEPSS 16%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17417
    42Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    quest · netvault backupFeb 8, 2018

  • CVE-2019-20504
    42Plan

    service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code v

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    quest · kace systems managementMar 8, 2020

  • CVE-2020-8868
    42Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve 9.0.0.

    CriticalCVSS 9.8No exploitEPSS 9%

    quest · foglight evolveMar 23, 2020

  • CVE-2018-11132
    40Plan

    In order to perform actions that require higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue tha

    HighCVSS 8.8No exploitEPSS 18%

    quest · kace system management applianceMay 31, 2018

  • CVE-2017-17422
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 4%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17421
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 4%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17414
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 4%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17419
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 4%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17413
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 4%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17659
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 4%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17656
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 4%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17655
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 4%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17418
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 4%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17657
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 4%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17658
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 4%

    quest · netvault backupFeb 8, 2018

  • CVE-2017-17654
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 4%

    quest · netvault backupFeb 8, 2018