CVE-2019-20504
40Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 9.6%
from disclosure to weapon
Published on NVDMar 9
VulnCheck+1573d
exploitation probability
9.6%top 5% of all CVEs
observed exploitation
yesVulnCheck
service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid parameter.
Affected products
n/a · n/a