Skip to content
Noroxi

Kaseya records

35 published records for vendor kaseya.

Researcher profile

Entered KEV
2 · 5.7%
Weaponized
6 · 17.1%
Pre-auth RCE
7
With a fix record
0%
Median publish → KEV
640 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

35 records
  • CVE-2021-30116
    95Now

    Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6

    CriticalCVSS 9.8KEVWeaponizedEPSS 85%

    kaseya · vsa agentJul 9, 2021

  • CVE-2018-20753
    78This week

    Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShel

    CriticalCVSS 9.8KEVWeaponizedEPSS 29%

    kaseya · virtual system administratorFeb 5, 2019

  • CVE-2015-6922
    64This week

    Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not pro

    CriticalCVSS 9.8WeaponizedEPSS 82%

    kaseya · virtual system administratorFeb 17, 2020

  • CVE-2017-12478
    62This week

    It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameter

    CriticalCVSS 9.8WeaponizedEPSS 78%

    kaseya · unitrends backupAug 7, 2017

  • CVE-2017-12477
    60This week

    It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in

    CriticalCVSS 9.8WeaponizedEPSS 68%

    kaseya · unitrends backupAug 7, 2017

  • CVE-2018-6328
    60This week

    It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allo

    CriticalCVSS 9.8WeaponizedEPSS 64%

    kaseya · unitrends backupMar 14, 2018

  • CVE-2021-30117
    57Plan

    Authenticated SQL injection in Kaseya VSA < v9.5.6

    HighCVSS 8.8No exploitEPSS 72%

    kaseya · vsaJul 9, 2021

  • CVE-2021-30118
    57Plan

    Unauthenticated Remote Code Execution in Kaseya VSA < v9.5.5

    CriticalCVSS 9.8Proof of conceptEPSS 60%

    kaseya · vsaJul 9, 2021

  • CVE-2021-43033
    41Plan

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    CriticalCVSS 9.8No exploitEPSS 6%

    kaseya · unitrends backupDec 6, 2021

  • CVE-2021-43035
    40Plan

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    CriticalCVSS 9.8No exploitEPSS 3%

    kaseya · unitrends backupDec 6, 2021

  • CVE-2021-43042
    40Plan

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    CriticalCVSS 9.8No exploitEPSS 2%

    kaseya · unitrends backupDec 6, 2021

  • CVE-2021-40386
    40Plan

    Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code.

    CriticalCVSS 9.8No exploitEPSS 1%

    kaseya · unitrends backupApr 15, 2022

  • CVE-2021-43036
    40Plan

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    CriticalCVSS 9.8No exploitEPSS 1%

    kaseya · unitrends backupDec 6, 2021

  • CVE-2021-43044
    40Plan

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    CriticalCVSS 9.8No exploitEPSS 1%

    kaseya · unitrends backupDec 6, 2021

  • CVE-2021-30119
    39Monitor

    Authenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6

    MediumCVSS 5.4No exploitEPSS 58%

    kaseya · vsaJul 9, 2021

  • CVE-2015-6589
    39Monitor

    Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 be

    HighCVSS 8.8Proof of conceptEPSS 13%

    kaseya · virtual system administratorFeb 13, 2020

  • CVE-2017-12479
    39Monitor

    It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR environment variable du

    HighCVSS 8.8Proof of conceptEPSS 11%

    kaseya · unitrends backupAug 7, 2017

  • CVE-2021-30201
    38Monitor

    Unauthenticated XML External Entity vulnerability in Kaseya VSA < v9.5.6

    HighCVSS 7.5No exploitEPSS 26%

    kaseya · vsaJul 9, 2021

  • CVE-2021-40387
    36Monitor

    An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2.

    HighCVSS 8.8No exploitEPSS 2%

    kaseya · unitrends backup softwareSep 1, 2021

  • CVE-2021-43041
    36Monitor

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    HighCVSS 8.8No exploitEPSS 2%

    kaseya · unitrends backupDec 6, 2021

  • CVE-2021-43038
    36Monitor

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    HighCVSS 8.8No exploitEPSS 2%

    kaseya · unitrends backupDec 6, 2021

  • CVE-2021-43040
    36Monitor

    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.

    HighCVSS 8.8No exploitEPSS 1%

    kaseya · unitrends backupDec 6, 2021

  • CVE-2021-40385
    35Monitor

    An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2.

    HighCVSS 8.8No exploitEPSS 1%

    kaseya · unitrends backup softwareSep 1, 2021

  • CVE-2021-30120
    32Monitor

    2FA bypass in Kaseya VSA <= v9.5.6

    HighCVSS 7.5No exploitEPSS 5%

    kaseya · vsaJul 9, 2021

  • CVE-2019-15506
    31Monitor

    An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37.

    HighCVSS 7.5No exploitEPSS 1%

    kaseya · virtual system administratorAug 26, 2019