Login Request a demo
VS
Product
Vsa
by Kaseya · last CVE Jul 9, 2021
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 3Medium 3Low 0
Severity
All severities7Critical1High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Vsa to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-30118
9.8
60%
Jul 9
An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Management (RMM) 9.5.4.2149 and subsequently use these files…
Affected: before 9.5.5
CVE-2021-30117
8.8
72%
Jul 9
The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injection in the parameter fldrId
Affected: before 9.5.6
CVE-2021-30201
7.5
26%
Jul 9
The API /vsaWS/KaseyaWS.asmx can be used to submit XML to the system
Affected: before 9.5.6
CVE-2021-30120
7.5
6%
Jul 9
Kaseya VSA before 9.5.7 allows attackers to bypass the 2FA requirement
Affected: through 9.5.6
CVE-2019-14510
6.7
1%
Oct 11
An issue was discovered in Kaseya VSA RMM through 9.5.0.22
Affected: through 9.5.0.22
CVE-2021-30121
6.5
5%
Jul 9
Semi-authenticated local file inclusion The contents of arbitrary files can be returned by the webserver Example request:…
Affected: before 9.5.6
CVE-2021-30119
5.4
59%
Jul 9
Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to…
Affected: before 9.5.7
Showing 7