[ Vendor · 3 CVEs ]
Kaseya
CVEs affecting Kaseya published in the last 30 days, plus any Kaseya CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2021-30116 | 9 Jul 2021 | CVSS 9.8 | Kaseya Virtual System/Server Administrator (VSA) Information DisclosureKaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page… | Exploited |
| CVE-2017-18362 | 5 Feb 2019 | CVSS 9.8 | Kaseya VSA SQL InjectionConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to… | Exploited |
| CVE-2018-20753 | 5 Feb 2019 | CVSS 9.8 | Kaseya VSA Remote Code ExecutionKaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell… | Exploited |