CVE-2020-8868

9.8 criticalEPSS 9.5%

Critical (9.8) in quest foglight evolve. EPSS 9.5% chance of exploitation in the next 30 days.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve 9.0.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the __service__ user account. The product contains a hard-coded password for this account. An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-9553.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 9.5% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2020-03-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

quest:foglight_evolve

References

https://support.quest.com/foglight/kb/315091/fms-5-9-5-hotfix-hfix-314
https://www.zerodayinitiative.com/advisories/ZDI-20-290/
https://support.quest.com/foglight/kb/315091/fms-5-9-5-hotfix-hfix-314
https://www.zerodayinitiative.com/advisories/ZDI-20-290/

Check your stack JSON