Read the docs

ConnectWise

Records40All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

ConnectWise records in CISA KEV
TI-2026-58346 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability Priority CRITICAL 100KEV 2026-09-11TI-2024-01588 ConnectWise ScreenConnect Path Traversal Vulnerability Priority CRITICAL 96KEV 2026-04-28TI-2025-03479 ConnectWise ScreenConnect Improper Authentication Vulnerability Priority CRITICAL 94KEV 2025-06-02TI-2024-01589 ConnectWise ScreenConnect Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2024-02-22TI-2017-13536 Kaseya VSA SQL Injection Vulnerability Priority CRITICAL 100KEV 2022-05-24

Components

Products in the NVD configurations · select one to filter the records
Automate 11 records MEDIUM Screenconnect 10 records CRITICAL Control 8 records HIGH Professional Service Automation 3 records LOW Connectwise 2 records LOW Connectwise Automate 2 records LOW Manage 2 records LOW Automate Api 1 record MEDIUM

Records

1 record in Automate Api · all components

TI-2020-11086 CVE-2020-14159 · GHSA-8qvw-fg47-cq5q

By using an Automate API in ConnectWise Automate before 2020.5.178, a remote…

Priority MEDIUM 42

By using an Automate API in ConnectWise Automate before 2020.5.178, a remote authenticated user could execute commands and/or modifications within an individual Automate instance by triggering an SQL injection vulnerabil…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01932 Published 2020-06-15 No fix listed CWE-89
Open these records in search →