VS
Product
Virtual System Administrator
On CISA KEVExploited in the wildRansomware-linked
8
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 0Low 0
Watch
Add Virtual System Administrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-20753 RansomwareIn wildKEV | 9.8 | Feb 5 | Kaseya VSA Remote Code Execution Vulnerability Affected: 9.3 before 9.3.0.35; 9.4 before 9.4.0.36; 9.5 before 9.5.0.5 |
| CVE-2015-6922 | 9.8 | Feb 17 | Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which… Affected: 7.0.0.0 before 7.0.0.33; 8.0.0.0 before 8.0.0.23; 9.0.0.0 before 9.0.0.19; 9.1.0.0 before 9.1.0.9 |
| CVE-2015-6589 | 8.8 | Feb 13 | Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 before 9.0.0.19, and 9.1.0.0 before… Affected: 7.0.0.0 before 7.0.0.33; 8.0.0.0 before 8.0.0.23; 9.0.0.0 before 9.0.0.19; 9.1.0.0 before 9.1.0.9 |
| CVE-2019-15506 | 7.5 | Aug 26 | An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37 Affected: through 9.4.0.37 |
| CVE-2017-12410 | 7.4 | Mar 26 | It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier… Affected: through 9.3.0.11 |
| CVE-2015-2863 | – | Jul 20 | Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote… Affected: 7.0 before 7.0.0.29; 8.0 before 8.0.0.18; 9.0 before 9.0.0.14; 9.1 before 9.1.0.4 |
| CVE-2015-2862 | – | Jul 20 | Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote… Affected: 7.0 before 7.0.0.29; 8.0 before 8.0.0.18; 9.0 before 9.0.0.14; 9.1 before 9.1.0.4 |
| CVE-2014-2926 | – | Jul 14 | kapfa.sys in Kaseya Virtual System Administrator (VSA) 6.5 before 6.5.0.17 and 7.0 before 7.0.0.16 allows local users to cause a denial of service (NULL pointer dereference and… Affected: 6.5; 7.0 |
Showing 8