{"id":"CVE-2021-30119","aliases":["EUVD-2021-17059","GHSA-f43v-wh9x-rgq6"],"status":"published","title":"Authenticated Authenticated reflective XSS in Kaseya VSA \u003c= v9.5.6","description":"Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTab/rcResults.asp?result=\u003cscript\u003ealert(document.cookie)\u003c/script\u003e` The same is true for the parameter FileName of /done.asp Eaxmple request: `https://x.x.x.x/done.asp?FileName=\";\u003c/script\u003e\u003cscript\u003ealert(1);a=\"\u0026PathData=\u0026originalName=shell.aspx\u0026FileSize=4388\u0026TimeElapsed=00:00:00.078`","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.58759,"percentile":0.99117,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2021-07-09T13:20:58Z","modified":"2026-08-14T06:32:06Z","products":[{"vendor":"kaseya","product":"vsa"}],"references":[{"url":"https://csirt.divd.nl/2021/07/07/Kaseya-Limited-Disclosure/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory"]},{"url":"https://csirt.divd.nl/DIVD-2021-00011","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory"]},{"url":"https://csirt.divd.nl/CVE-2021-30119","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30119"},{"url":"https://csirt.divd.nl/2021/07/07/Kaseya-Limited-Disclosure"},{"url":"https://github.com/advisories/GHSA-f43v-wh9x-rgq6"}],"sources":{"cve":[{"id":"CVE-2021-30119","title":"Authenticated Authenticated reflective XSS in Kaseya VSA \u003c= v9.5.6","description":"Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTab/rcResults.asp?result=\u003cscript\u003ealert(document.cookie)\u003c/script\u003e` The same is true for the parameter FileName of /done.asp Eaxmple request: `https://x.x.x.x/done.asp?FileName=\";\u003c/script\u003e\u003cscript\u003ealert(1);a=\"\u0026PathData=\u0026originalName=shell.aspx\u0026FileSize=4388\u0026TimeElapsed=00:00:00.078`","status":"published","published":"2021-07-09T13:20:58Z","modified":"2026-08-14T03:55:33.368Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:01.852999Z"}],"euvd":[{"id":"EUVD-2021-17059","description":"Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTab/rcResults.asp?result=\u003cscript\u003ealert(document.cookie)\u003c/script\u003e` The same is true for the parameter FileName of /done.asp Eaxmple request: `https://x.x.x.x/done.asp?FileName=\";\u003c/script\u003e\u003cscript\u003ealert(1);a=\"\u0026PathData=\u0026originalName=shell.aspx\u0026FileSize=4388\u0026TimeElapsed=00:00:00.078`","status":"published","published":"2021-07-09T13:20:58Z","modified":"2026-08-14T03:55:33Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:01:55.248337Z"}],"ghsa":[{"id":"GHSA-f43v-wh9x-rgq6","title":"Cross Site Scripting (XSS) exists in Kaseya VSA before 9.5.7.","description":"Cross Site Scripting (XSS) exists in Kaseya VSA before 9.5.7.","status":"published","published":"2022-05-24T19:07:22Z","modified":"2026-08-14T06:32:06Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:10:28.576497Z"}],"nvd":[{"id":"CVE-2021-30119","description":"Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTab/rcResults.asp?result=\u003cscript\u003ealert(document.cookie)\u003c/script\u003e` The same is true for the parameter FileName of /done.asp Eaxmple request: `https://x.x.x.x/done.asp?FileName=\";\u003c/script\u003e\u003cscript\u003ealert(1);a=\"\u0026PathData=\u0026originalName=shell.aspx\u0026FileSize=4388\u0026TimeElapsed=00:00:00.078`","status":"published","published":"2021-07-09T14:15:07.873Z","modified":"2026-08-14T05:16:54.757Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:06:55.259633Z"}]}}