CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-06-24
Quest KACE Systems Management Appliance (SMA) SSO Authentication Bypass and Administrative Takeover (CVE-2025-32975)
[Affected Scope] Quest KACE Systems Management Appliance (SMA) versions 13.0, 13.1, 13.2, 14.0, and 14.1
[Impact] Unauthenticated remote attackers can bypass SSO authentication to impersonate legitimate users and achieve complete administrative takeover
[Mitigation] Immediately upgrade to the patched versions (13.0.385, 13.1.81, 13.2.183, 14.0.341, or 14.1.101 and above)