Vendor

    Kaseya

    36 known vulnerabilities in products by Kaseya, 2 of them actively exploited (CISA KEV).

    Key figures

    36

    Vulnerabilities

    2

    Actively exploited (KEV)

    2

    Used by ransomware

    16

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Kaseya
    CriticalCVE-2021-30116

    Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6

    In CISA KEVRansomware

    		10.0
    CriticalCVE-2018-20753

    Kaseya VSA Remote Code Execution Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2015-6922

    Kaseya Virtual System/Server Administrator (VSA): Authentication Bypass

    		9.8
    CriticalCVE-2017-12478

    Kaseya Unitrends Backup: Authentication Bypass

    		9.8
    CriticalCVE-2021-30117

    Authenticated SQL injection in Kaseya VSA < v9.5.6

    		9.8
    CriticalCVE-2017-12477

    Kaseya Unitrends Backup: security vulnerability

    		9.8
    CriticalCVE-2018-6328

    Kaseya Unitrends Backup: Authentication Bypass

    		9.8
    CriticalCVE-2021-30118

    Unauthenticated Remote Code Execution in Kaseya VSA < v9.5.5

    		9.8
    CriticalCVE-2021-43033

    Kaseya Unitrends Backup: Remote Code Execution

    		9.8
    CriticalCVE-2021-30120

    2FA bypass in Kaseya VSA <= v9.5.6

    		9.9
    HighCVE-2015-6589

    Kaseya Virtual System/Server Administrator (VSA): Path Traversal

    		8.8
    HighCVE-2017-12479

    Kaseya Unitrends Backup: security vulnerability

    		8.8
    CriticalCVE-2013-10034

    Kaseya < 6.3.0.2 uploadImage.asp Arbitrary File Upload RCE

    		—
    HighCVE-2021-30201

    Unauthenticated XML External Entity vulnerability in Kaseya VSA < v9.5.6

    		7.5
    CriticalCVE-2021-43035

    Kaseya Unitrends Backup: SQL Injection

    		9.8
    CriticalCVE-2021-43042

    Kaseya Unitrends Backup: Buffer Overflow

    		9.8
    MediumCVE-2021-30119

    Authenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6

    		5.4
    CriticalCVE-2021-40386

    Kaseya Unitrends Backup: Code Execution

    		9.8
    HighCVE-2021-40387

    Kaseya Unitrends Backup Software: Remote Code Execution

    		8.8
    MediumCVE-2021-30121

    (Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.6

    		6.5
    HighCVE-2021-43041

    Kaseya Unitrends Backup: Format String

    		8.8
    CriticalCVE-2021-43036

    Kaseya Unitrends Backup: security vulnerability

    		9.8
    CriticalCVE-2021-43044

    Kaseya Unitrends Backup: security vulnerability

    		9.8
    HighCVE-2021-43038

    Kaseya Unitrends Backup: Privilege Escalation

    		8.8
    HighCVE-2021-43040

    Kaseya Unitrends Backup: Privilege Escalation

    		8.8

    All vulnerabilities in search

    Products

    Products by Kaseya
    Unitrends Backup170
    Kaseya Virtual System/Server Administrator (VSA)81
    Kaseya VSA70