← Vulnerability feed

Vulnerability record · CVE-2018-11190 · published 2 June 2018

CVE-2018-11190: Quest disk backup improper privilege management vulnerability

Quest · Disk Backup

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 2 of 6).

8.8 CVSS 3.0 High EPSS 2.7% · top 14.8% CWE-269 · Improper privilege management
8.8CVSS 3.0 base score, v2 9.0
2.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 2 of 6).

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html Third Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2018/May/71 Mailing ListThird Party Advisory
https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities Third Party Advisory
http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html Third Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2018/May/71 Mailing ListThird Party Advisory
https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities Third Party Advisory

Track CVE-2018-11190 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-11143Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46).EPSS 37%8.8CVE-2018-11175Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).EPSS 4.5%8.8CVE-2018-11176Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).EPSS 4.6%8.8CVE-2018-11177Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).EPSS 4.5%8.8CVE-2018-11178Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).EPSS 4.5%8.8CVE-2018-11179Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).EPSS 4.5%8.8CVE-2018-11180Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46).EPSS 4.5%8.8CVE-2018-11181Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46).EPSS 4.5%

Source: NIST National Vulnerability Database (record CVE-2018-11190), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.