VULNERABILITY INTELLIGENCE

CVE-2022-38220

CVSS score6.1 MEDIUM

EPSS probability0.56%

CISA KEVNot currently listed

Published2023-03-01

Last modified2026-06-17

Description

An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote injection of arbitrary web script or HTML.