Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2021-30119 |
|
Cross Site Scripting (XSS) exists in Kaseya VSA before 9.5.7.
Cross Site Scripting (XSS) exists in Kaseya VSA before 9.5.7.
|
| CVE-2021-30120 |
|
Kaseya VSA through 9.5.7 allows attackers to bypass the 2FA requirement.
Kaseya VSA through 9.5.7 allows attackers to bypass the 2FA requirement.
|
| CVE-2017-18362 KEV |
|
[KEV] SQL Injection in Kaseya virtual-systemserver-administrator-vsa (CVE-2017-18362)
SQL injection in Kaseya virtual-systemserver-administrator-vsa (CVE-2017-18362). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2018-20753 KEV |
|
[KEV] Vulnerability in Kaseya virtual-systemserver-administrator-vsa (CVE-2018-20753)
vulnerability in Kaseya virtual-systemserver-administrator-vsa (CVE-2018-20753). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2021-30116 KEV |
|
[KEV] Vulnerability in Kaseya virtual-systemserver-administrator-vsa (CVE-2021-30116)
vulnerability in Kaseya virtual-systemserver-administrator-vsa (CVE-2021-30116). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2017-12477 |
|
Authentication Bypass in kaseya (CVE-2017-12477)
authentication bypass in kaseya (CVE-2017-12477). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12478 |
|
Authentication Bypass in kaseya (CVE-2017-12478)
authentication bypass in kaseya (CVE-2017-12478). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12479 |
|
Vulnerability in kaseya (CVE-2017-12479)
vulnerability in kaseya (CVE-2017-12479). Successful exploitation can lead to full system takeover.
|