{ "schema_version": "1.4.0", "id": "GHSA-7jrq-v376-6533", "modified": "2022-05-24T17:00:33Z", "published": "2022-05-24T17:00:33Z", "aliases": [ "CVE-2019-13081" ], "details": "Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the title field in the /common/ticket_associated_tickets.php service desk ticket functionality) that allows an authenticated user to execute arbitrary JavaScript in a service desk user's browser.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13081" }, { "type": "WEB", "url": "https://support.quest.com/kb/311388/quest-response-to-certezza-vulnerability-report" }, { "type": "WEB", "url": "https://www.quest.com/products/kace-systems-management-appliance" } ], "database_specific": { "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2019-11-06T15:15:00Z" } }