S4E just found a low-severity finding from dns any record query
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
CVE

CVE-2019-20504

9.8
CVSS
Description

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid parameter.

Attack Vector
-
Privileges Req.
-
User Interaction
-
Updated Sep 25, 2026View on NVD →
S4E scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →