Known Exploited Vulnerabilities May 24, 2022 · CISA KEV Catalog

CVE-2017-18362: Kaseya VSA SQL Injection Vulnerability

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2017-18362Kaseya

Related

CVE-2018-20753: Kaseya VSA Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Apr 13, 2022

CVE-2021-30116: Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026