Foglight for Databases vulnerabilities

15 known vulnerabilities in Foglight for Databases from Quest. 15 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

15vulnerabilities

3critical

12high

0exploited

8.6average CVSS score

Latest first

7.8 High severity
Foglight for Databases: Incorrect Permission Assignment for Critical Resource
CVE-2026-92200Nov 4, 2026Quest
Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An attacker must first obtain the
7.8 High severity
Foglight for Databases: Use of Hard-coded Cryptographic Key
CVE-2026-92199Nov 4, 2026Quest
Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An attacker must first obt
8.2 High severity
Foglight for Databases: Improper Restriction of XML External Entity Reference
CVE-2026-92198Nov 4, 2026QuestEPSS 2.8%
Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Quest Foglight for Databases. Authent
8.8 High severity
Foglight for Databases: Improper Limitation of a Pathname to a Restricted Directory
CVE-2026-92197Nov 4, 2026QuestEPSS 1.27%
Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploi
7.2 High severity
Foglight for Databases: Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-92196Nov 4, 2026Quest
Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication
8.8 High severity
Foglight for Databases: Improper Limitation of a Pathname to a Restricted Directory
CVE-2026-92195Nov 4, 2026QuestEPSS 1.27%
Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required t
8.8 High severity
Foglight for Databases: Improper Limitation of a Pathname to a Restricted Directory
CVE-2026-92194Nov 4, 2026QuestEPSS 1.27%
Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is requ
8.8 High severity
Foglight for Databases: Improper Limitation of a Pathname to a Restricted Directory
CVE-2026-92192Nov 4, 2026QuestEPSS 1.27%
Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to e
8.8 High severity
Foglight for Databases: Incorrect Authorization
CVE-2026-92191Nov 4, 2026Quest
Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to ex
9.8 Critical severity
Foglight for Databases: Deserialization of Untrusted Data
CVE-2026-92190Nov 4, 2026Quest
Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentic
9.8 Critical severity
Foglight for Databases: External Control of File Name or Path
CVE-2026-92189Nov 4, 2026Quest
Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentic
9.8 Critical severity
Foglight for Databases: Missing Authentication for Critical Functionality
CVE-2026-92188Nov 4, 2026Quest
Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is n
8.8 High severity
Foglight for Databases: Improper Limitation of a Pathname to a Restricted Directory
CVE-2026-92187Nov 4, 2026QuestEPSS 1.27%
Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication
8.8 High severity
Foglight for Databases: Improper Limitation of a Pathname to a Restricted Directory
CVE-2026-92186Nov 4, 2026QuestEPSS 1.27%
Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is
7.2 High severity
Foglight for Databases: Improper Restriction of XML External Entity Reference
CVE-2026-92185Nov 4, 2026QuestEPSS 1.89%
Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for Databases. Authenticat