ConnectWise

Records40All Threatist records

Exploited (KEV)5In CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

ConnectWise records in CISA KEV

TI-2026-58346 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability CRITICAL 100KEV 2026-09-11 TI-2024-01588 ConnectWise ScreenConnect Path Traversal Vulnerability CRITICAL 96KEV 2026-04-28 TI-2025-03479 ConnectWise ScreenConnect Improper Authentication Vulnerability CRITICAL 94KEV 2025-06-02 TI-2024-01589 ConnectWise ScreenConnect Authentication Bypass Vulnerability CRITICAL 100KEV 2024-02-22 TI-2017-13536 Kaseya VSA SQL Injection Vulnerability CRITICAL 100KEV 2022-05-24

Components

Products in the NVD configurations · select one to filter the records

Automate 11 records MEDIUM Screenconnect 10 records CRITICAL Control 8 records HIGH Professional Service Automation 3 records LOW Connectwise 2 records LOW Connectwise Automate 2 records LOW Manage 2 records LOW Automate Api 1 record MEDIUM

Records

2 records in Connectwise · all components

TI-2023-09148 CVE-2023-23128 · GHSA-2ww8-f9rj-2xg5

Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS).

LOW 27

Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00374 Published 2023-02-01 No fix listed CWE-942

TI-2023-09147 CVE-2023-23127 · GHSA-6fr7-2fr2-7jh9

In Connectwise Control 22.8.10013.8329, the login page does not implement HSTS headers…

LOW 24

In Connectwise Control 22.8.10013.8329, the login page does not implement HSTS headers therefore not enforcing HTTPS.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00313 Published 2023-02-01 No fix listed CWE-311

Open these records in search →