Kaseya

Virtual System Administrator

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2015-6922

Exploit
  • EPSS 77.8%
  • Veröffentlicht 17.02.2020 18:15:11
  • Zuletzt bearbeitet 21.11.2024 02:35:52

Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an administra...

8.8

CVE-2015-6589

Exploit
  • EPSS 14.09%
  • Veröffentlicht 13.02.2020 21:15:11
  • Zuletzt bearbeitet 21.11.2024 02:35:16

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 before 9.0.0.19, and 9.1.0.0 before 9.1.0.9 allows remote authenticated users to write to and execute arbitrary ...

7.8

CVE-2019-15506

  • EPSS 0.56%
  • Veröffentlicht 26.08.2019 12:15:11
  • Zuletzt bearbeitet 21.11.2024 04:28:53

An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37. It has a critical information disclosure vulnerability. An unauthenticated attacker can send properly formatted requests to the web application and download sensit...

9.8

CVE-2018-20753

Warnung Exploit
  • EPSS 37.71%
  • Veröffentlicht 05.02.2019 06:29:00
  • Zuletzt bearbeitet 07.11.2025 19:09:13

Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this vulnerability in the wil...

7.4

CVE-2017-12410

  • EPSS 0.04%
  • Veröffentlicht 26.03.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:09:25

It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Succes...

4

CVE-2015-2862

  • EPSS 2.83%
  • Veröffentlicht 20.07.2015 23:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users to read arbitrary files via a crafted HTTP request.

4.3

CVE-2015-2863

  • EPSS 46.46%
  • Veröffentlicht 20.07.2015 23:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attac...

1.7

CVE-2014-2926

  • EPSS 0.22%
  • Veröffentlicht 14.07.2014 21:55:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

kapfa.sys in Kaseya Virtual System Administrator (VSA) 6.5 before 6.5.0.17 and 7.0 before 7.0.0.16 allows local users to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.