KA
Vendor
Kaseya
40
CVEs
6
On KEV
0
New 30D
Products
VS9.8
Virtual System/Server Administrator (VSA)
Kaseya
3 CVEs3 on KEV0 new
VS9.8
Virtual System Administrator
Kaseya
8 CVEs1 on KEV0 new
VA9.8
Vsa Agent
Kaseya
1 CVEs1 on KEV0 new
VS9.8
Vsa Server
Kaseya
1 CVEs1 on KEV0 new
UB9.8
Unitrends Backup
Kaseya
17 CVEs0 on KEV0 new
VS9.8
Vsa
Kaseya
7 CVEs0 on KEV0 new
UB8.8
Unitrends Backup Software
Kaseya
2 CVEs0 on KEV0 new
KS9.3
KServer
Kaseya
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2013-10034 | KS KServer Kaseya | 9.3 | Jul 31 | Kaseya < 6.3.0.2 uploadImage.asp Arbitrary File Upload RCE |
| CVE-2021-40386 | UB Unitrends Backup Kaseya | 9.8 | Apr 15 | Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code |
| CVE-2021-43044 | UB Unitrends Backup Kaseya | 9.8 | Dec 6 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5 |
| CVE-2021-43043 | UB Unitrends Backup Kaseya | 6.5 | Dec 6 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5 |
| CVE-2021-43042 | UB Unitrends Backup Kaseya | 9.8 | Dec 6 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5 |
| CVE-2021-43041 | UB Unitrends Backup Kaseya | 8.8 | Dec 6 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5 |
| CVE-2021-43040 | UB Unitrends Backup Kaseya | 8.8 | Dec 6 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5 |
| CVE-2021-43039 | UB Unitrends Backup Kaseya | 6.5 | Dec 6 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5 |
| CVE-2021-43038 | UB Unitrends Backup Kaseya | 8.8 | Dec 6 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5 |
| CVE-2021-43037 | UB Unitrends Backup Kaseya | 7.8 | Dec 6 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5 |
| CVE-2021-43036 | UB Unitrends Backup Kaseya | 9.8 | Dec 6 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5 |
| CVE-2021-43035 | UB Unitrends Backup Kaseya | 9.8 | Dec 6 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5 |
| CVE-2021-43034 | UB Unitrends Backup Kaseya | 7.8 | Dec 6 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5 |
| CVE-2021-43033 | UB Unitrends Backup Kaseya | 9.8 | Dec 6 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5 |
| CVE-2021-40387 | UB Unitrends Backup Software Kaseya | 8.8 | Sep 1 | An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2 |
| CVE-2021-40385 | UB Unitrends Backup Software Kaseya | 8.8 | Sep 1 | An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2 |
| CVE-2021-30201 | VS Vsa Kaseya | 7.5 | Jul 9 | The API /vsaWS/KaseyaWS.asmx can be used to submit XML to the system |
| CVE-2021-30121 | VS Vsa Kaseya | 6.5 | Jul 9 | Semi-authenticated local file inclusion The contents of arbitrary files can be returned by the webserver Example request:… |
| CVE-2021-30120 | VS Vsa Kaseya | 7.5 | Jul 9 | Kaseya VSA before 9.5.7 allows attackers to bypass the 2FA requirement |
| CVE-2021-30119 | VS Vsa Kaseya | 5.4 | Jul 9 | Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to… |
| CVE-2021-30118 | VS Vsa Kaseya | 9.8 | Jul 9 | An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Management (RMM) 9.5.4.2149 and subsequently use these files… |
| CVE-2021-30117 | VS Vsa Kaseya | 8.8 | Jul 9 | The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injection in the parameter fldrId |
| CVE-2021-30116 RansomwareIn wildKEV | VS Vsa Server Kaseya | 9.8 | Jul 9 | Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6 |
| CVE-2015-6922 | VS Virtual System Administrator Kaseya | 9.8 | Feb 17 | Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which… |
| CVE-2015-6589 | VS Virtual System Administrator Kaseya | 8.8 | Feb 13 | Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 before 9.0.0.19, and 9.1.0.0 before… |
| CVE-2019-14510 | VS Vsa Kaseya | 6.7 | Oct 11 | An issue was discovered in Kaseya VSA RMM through 9.5.0.22 |
| CVE-2019-15506 | VS Virtual System Administrator Kaseya | 7.5 | Aug 26 | An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37 |
| CVE-2017-18362 RansomwareIn wildKEV | VS Virtual System/Server Administrator (VSA) Kaseya | 9.8 | Feb 5 | Kaseya VSA SQL Injection Vulnerability |
| CVE-2018-20753 RansomwareIn wildKEV | VS Virtual System Administrator Kaseya | 9.8 | Feb 5 | Kaseya VSA Remote Code Execution Vulnerability |
| CVE-2017-12410 | VS Virtual System Administrator Kaseya | 7.4 | Mar 26 | It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier… |
| CVE-2018-6328 | UB Unitrends Backup Kaseya | 9.8 | Mar 14 | It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject… |
| CVE-2017-12479 | UB Unitrends Backup Kaseya | 8.8 | Aug 7 | It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR environment variable during a web session to elevate an… |
| CVE-2017-12478 | UB Unitrends Backup Kaseya | 9.8 | Aug 7 | It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated |
| CVE-2017-12477 | UB Unitrends Backup Kaseya | 9.8 | Aug 7 | It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be… |
| CVE-2015-2863 | VS Virtual System Administrator Kaseya | – | Jul 20 | Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote… |
| CVE-2015-2862 | VS Virtual System Administrator Kaseya | – | Jul 20 | Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote… |
| CVE-2014-2926 | VS Virtual System Administrator Kaseya | – | Jul 14 | kapfa.sys in Kaseya Virtual System Administrator (VSA) 6.5 before 6.5.0.17 and 7.0 before 7.0.0.16 allows local users to cause a denial of service (NULL pointer dereference and… |