CVE-2014-0330: Cross-site scripting (XSS) vulnerability in adminui/user_list.php on the Dell KACE K1000 management applian...

Security readout for executives and security teams

CVE-2014-0330 is a cross-site scripting issue in the Dell KACE K1000 management appliance. If an exposed vulnerable admin page processes a crafted LABEL_ID value, attacker-controlled script or HTML could run in a user's browser. Business risk depends on whether vulnerable KACE 5.5.90545 systems remain deployed and reachable. Likely limited to organizations still running Dell KACE K1000 5.5.90545 or closely related vulnerable builds. Exposure depends on admin UI reachability. The provided evidence does not state whether authentication is required or whether other versions are affected. Prioritize based on asset exposure. Internet-reachable or broadly accessible KACE admin interfaces deserve prompt action because management appliances often hold privileged operational access. Internal-only, retired, or upgraded systems lower urgency, but the missing severity score means verification should not be skipped. Mitigation focus: Check Dell/KACE and CERT guidance for the vendor-approved fix or workaround.; Upgrade affected KACE K1000 appliances if vendor guidance identifies a fixed version.; Restrict KACE admin UI access to trusted networks or VPN users..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.