Vulnerabilities

TI-2015-05774 CVE-2015-6922 · GHSA-qf3c-cpvg-3663

Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0…

HIGH 83

Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentica…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.82102 Published 2020-02-17 No fix listed CWE-287

TI-2015-05525 CVE-2015-6589 · GHSA-vwch-7j7j-p95x

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0…

MEDIUM 53

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 before 9.0.0.19, and 9.1.0.0 before 9.1.0.9 allows remote authenticated users to w…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.13577 Published 2020-02-13 No fix listed CWE-22

TI-2019-11608 CVE-2019-15506 · GHSA-mmp9-55v5-vp94

An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37.

LOW 36

An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01811 Published 2019-08-26 No fix listed CWE-306

TI-2018-14728 CVE-2018-20753 · GHSA-hhg2-f289-m44w

Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows…

CRITICAL 100KEV

Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.29551 Published 2019-02-05 No fix listed

TI-2017-09153 CVE-2017-12410 · GHSA-fpf9-7pjp-4x5q

It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning…

LOW 32

It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working an…

CVSS 3.0HIGH 7.4 Local No auth No interaction EPSS 0.00246 Published 2018-03-26 No fix listed CWE-362

TI-2015-02528 CVE-2015-2863 · GHSA-mcgp-344h-g8g4

Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before…

LOW 33

Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote attackers to redirect users to arbitrary web si…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.10246 Published 2015-07-20 No fix listed

TI-2015-02527 CVE-2015-2862 · GHSA-phcx-v584-666v

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before…

LOW 31

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users to read arbitrary fil…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.09415 Published 2015-07-20 No fix listed CWE-22

TI-2014-02347 CVE-2014-2926 · GHSA-992x-4rhv-25qp

kapfa.sys in Kaseya Virtual System Administrator (VSA) 6.5 before 6.5.0.17 and 7.0 before…

LOW 10

kapfa.sys in Kaseya Virtual System Administrator (VSA) 6.5 before 6.5.0.17 and 7.0 before 7.0.0.16 allows local users to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.

CVSS 2.0LOW 1.7 Local Low privileges Interaction — EPSS 0.0033 Published 2014-07-14 No fix listed

Vulnerabilities

Filters