Kaseya Virtual System Administrator — known CVE vulnerabilities

Every CVE whose affected-product data names Kaseya Virtual System Administrator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

CVE-2018-20753 — CVSS 9.8 (critical) — actively exploited: Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute…
CVE-2015-6922 — CVSS 9.8 (critical): Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not…
CVE-2015-6589 — CVSS 8.8 (high): Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0…
CVE-2019-15506 — CVSS 7.5 (high): An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37. It has a critical information disclosure…
CVE-2017-12410 — CVSS 7.4 (high): It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System…
CVE-2015-2863 — CVSS 4.3 (medium): Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and…
CVE-2015-2862 — CVSS 4.0 (medium): Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before…
CVE-2014-2926 — CVSS 1.7 (low): kapfa.sys in Kaseya Virtual System Administrator (VSA) 6.5 before 6.5.0.17 and 7.0 before 7.0.0.16 allows local users to cause a denial of…