Vulnerabilities

Filters

1 selected

37 records

Sort

Vendor: Kaseya Clear all filters

TI-2013-06177 CVE-2013-10034 · GHSA-86jp-9w2g-x862

Kaseya < 6.3.0.2 uploadImage.asp Arbitrary File Upload RCE

HIGH 81

An unrestricted file upload vulnerability exists in Kaseya KServer versions prior to 6.3.0.2.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0296 Published 2025-07-31 Fixed in 6.3.0.2 CWE-434

TI-2021-17451 CVE-2021-40386 · GHSA-hpmq-qx89-42jf

Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code.

MEDIUM 46

Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01943 Published 2022-04-15 No fix listed

TI-2021-19110 CVE-2021-43044 · GHSA-9x6h-x3mh-8xvh

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 46

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01923 Published 2021-12-06 No fix listed CWE-798

TI-2021-19109 CVE-2021-43043 · GHSA-xhh9-3g8r-qgcp

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

LOW 32

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01461 Published 2021-12-06 No fix listed

TI-2021-19108 CVE-2021-43042 · GHSA-8xcf-7jjj-p7rh

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 47

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0299 Published 2021-12-06 No fix listed CWE-120

TI-2021-19107 CVE-2021-43041 · GHSA-ph8m-x93x-px88

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 43

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02362 Published 2021-12-06 No fix listed CWE-134

TI-2021-19106 CVE-2021-43040 · GHSA-4r5f-vh76-jqxp

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 42

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01827 Published 2021-12-06 No fix listed

TI-2021-19105 CVE-2021-43039 · GHSA-mw9g-699g-m8gm

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

LOW 31

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01256 Published 2021-12-06 No fix listed

TI-2021-19104 CVE-2021-43038 · GHSA-6rjf-7wv7-gjwv

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 42

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02305 Published 2021-12-06 No fix listed CWE-74

TI-2021-19103 CVE-2021-43037 · GHSA-8mg3-xpwr-h867

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

LOW 35

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00521 Published 2021-12-06 No fix listed CWE-427

TI-2021-19102 CVE-2021-43036 · GHSA-3v2g-m6qm-pvj3

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 46

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01923 Published 2021-12-06 No fix listed CWE-521

TI-2021-19101 CVE-2021-43035 · GHSA-fjm2-hf29-g4fq

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 48

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0342 Published 2021-12-06 No fix listed CWE-89

TI-2021-19100 CVE-2021-43034 · GHSA-qh43-qjmr-4h4q

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

LOW 34

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00452 Published 2021-12-06 No fix listed CWE-732

TI-2021-19099 CVE-2021-43033 · GHSA-fw55-5674-qwvm

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

MEDIUM 51

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06188 Published 2021-12-06 No fix listed CWE-78

TI-2021-17450 CVE-2021-40385 · GHSA-cjcw-89fv-xfjw

An issue was discovered in the server software in Kaseya Unitrends Backup Software before…

MEDIUM 40

An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01133 Published 2021-09-01 No fix listed

TI-2021-17452 CVE-2021-40387 · GHSA-fw24-832r-x4vh

An issue was discovered in the server software in Kaseya Unitrends Backup Software before…

MEDIUM 43

An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02427 Published 2021-09-01 No fix listed

TI-2021-10736 CVE-2021-30201 · GHSA-xx66-m4r3-r5vf

Unauthenticated XML External Entity vulnerability in Kaseya VSA < v9.5.6

MEDIUM 55

The API /vsaWS/KaseyaWS.asmx can be used to submit XML to the system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.26085 Published 2021-07-09 No fix listed CWE-611

TI-2021-10670 CVE-2021-30121 · GHSA-v66q-p7rm-w9w6

(Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.6

LOW 37

Semi-authenticated local file inclusion The contents of arbitrary files can be returned by the webserver Example request: `https://x.x.x.x/KLC/js/Kaseya.SB.JS/js.aspx?path=C:\Kaseya\WebPages\dl.asp` A valid sessionId is…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04962 Published 2021-07-09 No fix listed CWE-829

TI-2021-10669 CVE-2021-30120 · GHSA-r6j9-rwx4-qcj3

2FA bypass in Kaseya VSA <= v9.5.6

CRITICAL 100

Kaseya VSA before 9.5.7 allows attackers to bypass the 2FA requirement.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.05701 Published 2021-07-09 No fix listed CWE-669

TI-2021-10668 CVE-2021-30119 · GHSA-f43v-wh9x-rgq6

Authenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6

HIGH 84

Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Examp…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.58759 Published 2021-07-09 No fix listed CWE-79

TI-2021-10667 CVE-2021-30118 · GHSA-9xr3-46q4-vwhg

Unauthenticated Remote Code Execution in Kaseya VSA < v9.5.5

HIGH 76

An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Management (RMM) 9.5.4.2149 and subsequently use these files to execute asp commands The api /SystemTab…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.60348 Published 2021-07-09 No fix listed CWE-434

TI-2021-10666 CVE-2021-30117 · GHSA-cfh7-xwhw-f278

Authenticated SQL injection in Kaseya VSA < v9.5.6

HIGH 80

The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injection in the parameter fldrId.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.72054 Published 2021-07-09 No fix listed CWE-89

TI-2021-10665 CVE-2021-30116 · GHSA-qm28-hjhx-pwqg

Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6

CRITICAL 100KEV

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.85735 Published 2021-07-09 No fix listed CWE-522

TI-2015-05774 CVE-2015-6922 · GHSA-qf3c-cpvg-3663

Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0…

HIGH 83

Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentica…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.82102 Published 2020-02-17 No fix listed CWE-287

TI-2015-05525 CVE-2015-6589 · GHSA-vwch-7j7j-p95x

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0…

MEDIUM 53

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 before 9.0.0.19, and 9.1.0.0 before 9.1.0.9 allows remote authenticated users to w…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.13577 Published 2020-02-13 No fix listed CWE-22