Skip to content

Kaseya vulnerabilities

Products

Newest

kaseya kserver Kaseya < 6.3.0.2 uploadImage.asp Arbitrary File Upload RCE CVE-2013-10034 Public exploit 9.3 CriticalJuly 31, 2025
kaseya unitrends backup Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code. CVE-2021-40386 9.8 CriticalApril 15, 2022
kaseya unitrends backup An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The SNMP daemon was... CVE-2021-43044 9.8 CriticalDecember 6, 2021
kaseya unitrends backup An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could... CVE-2021-43043 6.5 MediumDecember 6, 2021
kaseya unitrends backup An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A buffer overflow... CVE-2021-43042 9.8 CriticalDecember 6, 2021
kaseya unitrends backup An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP... CVE-2021-43041 8.8 HighDecember 6, 2021
kaseya unitrends backup An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The privileged... CVE-2021-43040 8.8 HighDecember 6, 2021
kaseya unitrends backup An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file... CVE-2021-43039 6.5 MediumDecember 6, 2021
kaseya unitrends backup An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The wguest account... CVE-2021-43038 8.8 HighDecember 6, 2021
kaseya unitrends backup An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows... CVE-2021-43037 7.8 HighDecember 6, 2021
kaseya unitrends backup An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The password for the... CVE-2021-43036 9.8 CriticalDecember 6, 2021
kaseya unitrends backup An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Two unauthenticated... CVE-2021-43035 9.8 CriticalDecember 6, 2021
kaseya unitrends backup An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A world writable file... CVE-2021-43034 7.8 HighDecember 6, 2021
kaseya unitrends backup An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Multiple functions in... CVE-2021-43033 9.8 CriticalDecember 6, 2021
kaseya unitrends backup software An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5... CVE-2021-40385 8.8 HighSeptember 1, 2021
kaseya unitrends backup software An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5... CVE-2021-40387 8.8 HighSeptember 1, 2021
kaseya vsa Unauthenticated XML External Entity vulnerability in Kaseya VSA < v9.5.6 CVE-2021-30201 EPSS 26.1% 7.5 HighJuly 9, 2021
kaseya vsa (Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.6 CVE-2021-30121 6.5 MediumJuly 9, 2021
kaseya vsa 2FA bypass in Kaseya VSA <= v9.5.6 CVE-2021-30120 9.9 CriticalJuly 9, 2021
kaseya vsa Authenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6 CVE-2021-30119 EPSS 58.8% 5.4 MediumJuly 9, 2021
kaseya vsa Unauthenticated Remote Code Execution in Kaseya VSA < v9.5.5 CVE-2021-30118 EPSS 60.3% 9.8 CriticalJuly 9, 2021
kaseya vsa Authenticated SQL injection in Kaseya VSA < v9.5.6 CVE-2021-30117 EPSS 72.1% 9.8 CriticalJuly 9, 2021
kaseya virtual system/server administrator (vsa), vsa agent, vsa server +2 more Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6 CVE-2021-30116 In KEV EPSS 85.7% 10.0 CriticalJuly 9, 2021
kaseya virtual system administrator Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9... CVE-2015-6922 Public exploit EPSS 82.1% 9.8 CriticalFebruary 17, 2020
kaseya virtual system administrator Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0... CVE-2015-6589 Public exploit EPSS 13.6% 8.8 HighFebruary 13, 2020
kaseya vsa An issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration,... CVE-2019-14510 6.7 MediumOctober 11, 2019
kaseya virtual system administrator An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37. It has a... CVE-2019-15506 7.5 HighAugust 26, 2019
kaseya virtual system/server administrator (vsa), virtual system administrator +1 more Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows... CVE-2018-20753 In KEV EPSS 29.6% 9.8 CriticalFebruary 5, 2019
connectwise manageditsync, kaseya virtual system/server administrator (vsa) +1 more ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to... CVE-2017-18362 In KEV EPSS 86.8% 9.8 CriticalFebruary 5, 2019
kaseya virtual system administrator It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race... CVE-2017-12410 7.4 HighMarch 26, 2018
kaseya unitrends backup It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an... CVE-2018-6328 Public exploit EPSS 64.4% 9.8 CriticalMarch 14, 2018
kaseya unitrends backup It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0... CVE-2017-12479 Public exploit EPSS 11.8% 8.8 HighAugust 7, 2017
kaseya unitrends backup It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has... CVE-2017-12478 Public exploit EPSS 78.3% 9.8 CriticalAugust 7, 2017
kaseya unitrends backup It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0,... CVE-2017-12477 Public exploit EPSS 68.2% 9.8 CriticalAugust 7, 2017
kaseya virtual system administrator Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x... CVE-2015-2863 Public exploit EPSS 10.2% 4.3 MediumJuly 20, 2015
kaseya virtual system administrator Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0... CVE-2015-2862 Public exploit 4.0 MediumJuly 20, 2015
kaseya virtual system administrator kapfa.sys in Kaseya Virtual System Administrator (VSA) 6.5 before 6.5.0.17 and 7.0 before 7.0.0... CVE-2014-2926 1.7 LowJuly 14, 2014