Vsa Server
1 CVEs
product
Monthly
Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Microsoft
Information Disclosure
Vsa Agent
Vsa Server
NVD
CVSS 3.1
9.8
EPSS
85.6%
EPSS 86%
CVSS 9.8
CRITICAL
POC
KEV
THREAT
Act Now
Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Microsoft
Information Disclosure
Vsa Agent
+1
NVD