Read the docs

Kaseya

Records37All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

Kaseya records in CISA KEV
TI-2017-13536 Kaseya VSA SQL Injection Vulnerability Priority CRITICAL 100KEV 2022-05-24TI-2018-14728 Kaseya VSA Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-04-13TI-2021-10665 Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Unitrends Backup 17 records HIGH Virtual System Administrator 8 records CRITICAL Vsa 7 records CRITICAL Unitrends Backup Software 2 records MEDIUM Vsa Agent 1 record CRITICAL Vsa Server 1 record CRITICAL

Records

7 records in Vsa · all components

TI-2021-10669 CVE-2021-30120 · GHSA-r6j9-rwx4-qcj3

2FA bypass in Kaseya VSA <= v9.5.6

Priority CRITICAL 100

Kaseya VSA before 9.5.7 allows attackers to bypass the 2FA requirement.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.05701 Published 2021-07-09 No fix listed CWE-669
TI-2021-10668 CVE-2021-30119 · GHSA-f43v-wh9x-rgq6

Authenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6

Priority HIGH 84

Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Examp…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.58759 Published 2021-07-09 No fix listed CWE-79
TI-2021-10666 CVE-2021-30117 · GHSA-cfh7-xwhw-f278

Authenticated SQL injection in Kaseya VSA < v9.5.6

Priority HIGH 80

The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injection in the parameter fldrId.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.72054 Published 2021-07-09 No fix listed CWE-89
TI-2021-10667 CVE-2021-30118 · GHSA-9xr3-46q4-vwhg

Unauthenticated Remote Code Execution in Kaseya VSA < v9.5.5

Priority HIGH 76

An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Management (RMM) 9.5.4.2149 and subsequently use these files to execute asp commands The api /SystemTab…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.60348 Published 2021-07-09 No fix listed CWE-434
TI-2021-10670 CVE-2021-30121 · GHSA-v66q-p7rm-w9w6

(Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.6

Priority LOW 37

Semi-authenticated local file inclusion The contents of arbitrary files can be returned by the webserver Example request: `https://x.x.x.x/KLC/js/Kaseya.SB.JS/js.aspx?path=C:\Kaseya\WebPages\dl.asp` A valid sessionId is…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04962 Published 2021-07-09 No fix listed CWE-829
Open these records in search →