Vendors / ConnectWise Records 40 All Threatist records
Exploited (KEV) 5
CVSS critical 10
CVSS high 15
Exploited now ConnectWise records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
In ConnectWise PSA versions older than 2026.1, Time Entry notes stored in the Time Entry Audit Trail may be rendered without applying output encoding to certain content.
CVSS 3.1 HIGH 8.7· Network · Low privileges · User interaction · EPSS 0.0028 · Published 2026-01-16 · Fixed in 2026.1 CWE-79
Priority LOW 29
In ConnectWise PSA versions older than 2026.1, certain session cookies were not set with the HttpOnly attribute.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00392 · Published 2026-01-16 · Fixed in 2026.1 CWE-1004
Priority LOW 29
In ConnectWise PSA versions older than 2025.9, a vulnerability exists where authenticated users could gain access to sensitive user information.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00356 · Published 2025-07-09 · Fixed in 2025.9 CWE-201
Open these records in search → All records by CVSS severity
10 15 15 0 0
