Kaseya

Records37All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical17CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Kaseya records in CISA KEV

TI-2017-13536 Kaseya VSA SQL Injection Vulnerability CRITICAL 100KEV 2022-05-24 TI-2018-14728 Kaseya VSA Remote Code Execution Vulnerability CRITICAL 100KEV 2022-04-13 TI-2021-10665 Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Unitrends Backup 17 records HIGH Virtual System Administrator 8 records CRITICAL Vsa 7 records CRITICAL Unitrends Backup Software 2 records MEDIUM Vsa Agent 1 record CRITICAL Vsa Server 1 record CRITICAL

Records

1 record in Vsa Server · all components

TI-2021-10665 CVE-2021-30116 · GHSA-qm28-hjhx-pwqg

Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6

CRITICAL 100KEV

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.85735 Published 2021-07-09 No fix listed CWE-522

Open these records in search →