Kaseya

Records37All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical17CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Kaseya records in CISA KEV

TI-2017-13536 Kaseya VSA SQL Injection Vulnerability CRITICAL 100KEV 2022-05-24 TI-2018-14728 Kaseya VSA Remote Code Execution Vulnerability CRITICAL 100KEV 2022-04-13 TI-2021-10665 Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Unitrends Backup 17 records HIGH Virtual System Administrator 8 records CRITICAL Vsa 7 records CRITICAL Unitrends Backup Software 2 records MEDIUM Vsa Agent 1 record CRITICAL Vsa Server 1 record CRITICAL

Records

17 records in Unitrends Backup · all components

TI-2017-09213 CVE-2017-12478 · GHSA-7q5j-8w8v-g89m

It was discovered that the api/storage web interface in Unitrends Backup (UB) before…

HIGH 82

It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.78269 Published 2017-08-07 No fix listed CWE-287

TI-2017-09212 CVE-2017-12477 · GHSA-9r4h-6jqx-qw6h

It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before…

HIGH 79

It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.68217 Published 2017-08-07 No fix listed CWE-287

TI-2018-04653 CVE-2018-6328 · GHSA-743r-2x7m-hrm4

It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed…

HIGH 78

It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts param…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.64369 Published 2018-03-14 No fix listed CWE-287

TI-2017-09214 CVE-2017-12479 · GHSA-qm9m-fp5f-xg9x

It was discovered that an issue in the session logic in Unitrends Backup (UB) before…

MEDIUM 52

It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR environment variable during a web session to elevate an existing low-privilege user to root privileges.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.11811 Published 2017-08-07 No fix listed

TI-2021-19099 CVE-2021-43033 · GHSA-fw55-5674-qwvm

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 51

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06188 Published 2021-12-06 No fix listed CWE-78

TI-2021-19101 CVE-2021-43035 · GHSA-fjm2-hf29-g4fq

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 48

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0342 Published 2021-12-06 No fix listed CWE-89

TI-2021-19108 CVE-2021-43042 · GHSA-8xcf-7jjj-p7rh

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 47

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0299 Published 2021-12-06 No fix listed CWE-120

TI-2021-19110 CVE-2021-43044 · GHSA-9x6h-x3mh-8xvh

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 46

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01923 Published 2021-12-06 No fix listed CWE-798

TI-2021-19102 CVE-2021-43036 · GHSA-3v2g-m6qm-pvj3

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 46

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01923 Published 2021-12-06 No fix listed CWE-521

TI-2021-17451 CVE-2021-40386 · GHSA-hpmq-qx89-42jf

Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code.

MEDIUM 46

Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01943 Published 2022-04-15 No fix listed

TI-2021-19107 CVE-2021-43041 · GHSA-ph8m-x93x-px88

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 43

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02362 Published 2021-12-06 No fix listed CWE-134

TI-2021-19106 CVE-2021-43040 · GHSA-4r5f-vh76-jqxp

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 42

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01827 Published 2021-12-06 No fix listed

TI-2021-19104 CVE-2021-43038 · GHSA-6rjf-7wv7-gjwv

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 42

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02305 Published 2021-12-06 No fix listed CWE-74

TI-2021-19103 CVE-2021-43037 · GHSA-8mg3-xpwr-h867

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

LOW 35

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00521 Published 2021-12-06 No fix listed CWE-427

TI-2021-19100 CVE-2021-43034 · GHSA-qh43-qjmr-4h4q

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

LOW 34

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00452 Published 2021-12-06 No fix listed CWE-732

TI-2021-19109 CVE-2021-43043 · GHSA-xhh9-3g8r-qgcp

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

LOW 32

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01461 Published 2021-12-06 No fix listed

TI-2021-19105 CVE-2021-43039 · GHSA-mw9g-699g-m8gm

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

LOW 31

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01256 Published 2021-12-06 No fix listed

Open these records in search →

Critical	17
High	12
Medium	7
Low	1
No CVSS	0