CVE-2014-0330

中危 4.3CVE-2014-0330 · Published 06/02/2014 · updated 17/06/2026

要点

CVE-2014-0330 是影响 kace k1000 systems management appliance software (dell) 的中危 (CVSS 4.3)漏洞。
未来 30 天内被利用的概率（EPSS）：2.2%，高于 82.6% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
kace k1000 systems management appliance software dell	`= 5.5.90545`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in adminui/user_list.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABEL_ID parameter.

References

osvdb.org/102855
kb.cert.org/vuls/id/813382 · Exploit
securityfocus.com/bid/65333
exchange.xforce.ibmcloud.com/vulnerabilities/90954

kace k1000 systems management appliance software 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free