What’s Vulnerable › Vulnerabilities

CVE-2017-12567

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-07 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2.

Affected products

• Quest K1000 As A Service: 7.0, 7.0.121306, 7.1, 7.1.149, 7.2
• Quest Kace Asset Management Appliance: 6.4.120822, 7.0, 7.0.121306, 7.1, 7.1.149, 7.2
• Quest KACE: 6.4.120822, 7.0, 7.0.121306, 7.1, 7.1.149, 7.2 (+1)

References

• https://support.quest.com/kace-systems-management-appliance/kb/231874
• https://support.quest.com/kace-systems-management-appliance/kb/231874

Get alerted when CVE-2017-12567 or the next vulnerability affects your stack