İçeriğe atla
Noroxi

Kaseya kayıtları

kaseya üreticisine ait 35 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
2 · %5,7
Silahlaştırılmış
6 · %17,1
Pre-auth RCE
7
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
640 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

35 kayıt
  • CVE-2021-30116
    95Hemen

    Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %86

    kaseya · vsa agent9 Tem 2021

  • CVE-2018-20753
    78Bu hafta

    Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShel

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %30

    kaseya · virtual system administrator5 Şub 2019

  • CVE-2015-6922
    64Bu hafta

    Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not pro

    KritikCVSS 9,8SilahlaştırılmışEPSS %82

    kaseya · virtual system administrator17 Şub 2020

  • CVE-2017-12478
    62Bu hafta

    It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameter

    KritikCVSS 9,8SilahlaştırılmışEPSS %78

    kaseya · unitrends backup7 Ağu 2017

  • CVE-2017-12477
    59Planlayın

    It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in

    KritikCVSS 9,8SilahlaştırılmışEPSS %68

    kaseya · unitrends backup7 Ağu 2017

  • CVE-2018-6328
    58Planlayın

    It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allo

    KritikCVSS 9,8SilahlaştırılmışEPSS %64

    kaseya · unitrends backup14 Mar 2018

  • CVE-2021-30117
    57Planlayın

    Authenticated SQL injection in Kaseya VSA < v9.5.6

    YüksekCVSS 8,8İstismar yokEPSS %72

    kaseya · vsa9 Tem 2021

  • CVE-2021-30118
    57Planlayın

    Unauthenticated Remote Code Execution in Kaseya VSA < v9.5.5

    KritikCVSS 9,8Kavram kanıtıEPSS %60

    kaseya · vsa9 Tem 2021

  • CVE-2021-43033
    41Planlayın

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    KritikCVSS 9,8İstismar yokEPSS %6

    kaseya · unitrends backup6 Ara 2021

  • CVE-2021-43035
    40Planlayın

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    KritikCVSS 9,8İstismar yokEPSS %3

    kaseya · unitrends backup6 Ara 2021

  • CVE-2021-43042
    40Planlayın

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    KritikCVSS 9,8İstismar yokEPSS %3

    kaseya · unitrends backup6 Ara 2021

  • CVE-2021-40386
    40Planlayın

    Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code.

    KritikCVSS 9,8İstismar yokEPSS %2

    kaseya · unitrends backup15 Nis 2022

  • CVE-2021-43036
    40Planlayın

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    KritikCVSS 9,8İstismar yokEPSS %2

    kaseya · unitrends backup6 Ara 2021

  • CVE-2021-43044
    40Planlayın

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    KritikCVSS 9,8İstismar yokEPSS %2

    kaseya · unitrends backup6 Ara 2021

  • CVE-2015-6589
    39İzleyin

    Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 be

    YüksekCVSS 8,8Kavram kanıtıEPSS %14

    kaseya · virtual system administrator13 Şub 2020

  • CVE-2017-12479
    39İzleyin

    It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR environment variable du

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    kaseya · unitrends backup7 Ağu 2017

  • CVE-2021-30201
    38İzleyin

    Unauthenticated XML External Entity vulnerability in Kaseya VSA < v9.5.6

    YüksekCVSS 7,5İstismar yokEPSS %25

    kaseya · vsa9 Tem 2021

  • CVE-2021-30119
    36İzleyin

    Authenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6

    OrtaCVSS 5,4İstismar yokEPSS %50

    kaseya · vsa9 Tem 2021

  • CVE-2021-40387
    36İzleyin

    An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2.

    YüksekCVSS 8,8İstismar yokEPSS %2

    kaseya · unitrends backup software1 Eyl 2021

  • CVE-2021-43041
    36İzleyin

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    YüksekCVSS 8,8İstismar yokEPSS %2

    kaseya · unitrends backup6 Ara 2021

  • CVE-2021-43038
    36İzleyin

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    YüksekCVSS 8,8İstismar yokEPSS %2

    kaseya · unitrends backup6 Ara 2021

  • CVE-2021-43040
    36İzleyin

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    YüksekCVSS 8,8İstismar yokEPSS %2

    kaseya · unitrends backup6 Ara 2021

  • CVE-2021-40385
    35İzleyin

    An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2.

    YüksekCVSS 8,8İstismar yokEPSS %1

    kaseya · unitrends backup software1 Eyl 2021

  • CVE-2021-30120
    32İzleyin

    2FA bypass in Kaseya VSA <= v9.5.6

    YüksekCVSS 7,5İstismar yokEPSS %6

    kaseya · vsa9 Tem 2021

  • CVE-2019-15506
    31İzleyin

    An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37.

    YüksekCVSS 7,5İstismar yokEPSS %2

    kaseya · virtual system administrator26 Ağu 2019