← Database

CVE-2022-29807

CRITICAL CVSS: 9.8 Published: 2022-08-02 Modified: 2026-06-17

Description

A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via download_agent_installer.php.

Affected Platforms

Quest Kace Systems Management Appliance

Weakness Type

CWE-89

References