ConnectWise

Records40All Threatist records

Exploited (KEV)5In CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

ConnectWise records in CISA KEV

TI-2026-58346 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability CRITICAL 100KEV 2026-09-11 TI-2024-01588 ConnectWise ScreenConnect Path Traversal Vulnerability CRITICAL 96KEV 2026-04-28 TI-2025-03479 ConnectWise ScreenConnect Improper Authentication Vulnerability CRITICAL 94KEV 2025-06-02 TI-2024-01589 ConnectWise ScreenConnect Authentication Bypass Vulnerability CRITICAL 100KEV 2024-02-22 TI-2017-13536 Kaseya VSA SQL Injection Vulnerability CRITICAL 100KEV 2022-05-24

Components

Products in the NVD configurations · select one to filter the records

Automate 11 records MEDIUM Screenconnect 10 records CRITICAL Control 8 records HIGH Professional Service Automation 3 records LOW Connectwise 2 records LOW Connectwise Automate 2 records LOW Manage 2 records LOW Automate Api 1 record MEDIUM

Records

2 records in Connectwise Automate · all components

TI-2021-12254 CVE-2021-32582 · GHSA-q5v7-h3m6-ch7h

An issue was discovered in ConnectWise Automate before 2021.5.

LOW 35

An issue was discovered in ConnectWise Automate before 2021.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01131 Published 2021-06-17 No fix listed CWE-89

TI-2020-11800 CVE-2020-15008 · GHSA-cg9h-vhcr-m9qp

A SQLi exists in the probe code of all Connectwise Automate versions before 2020.7 or…

LOW 35

A SQLi exists in the probe code of all Connectwise Automate versions before 2020.7 or 2019.12.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0089 Published 2020-07-07 No fix listed CWE-89

Open these records in search →