CVE-2017-18362 Kaseya Virtual System/Server Administrator (VSA)
ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.
- CVSS
- not scored
On CISA’s exploited list
Kaseya VSA SQL Injection Vulnerability
- Added
- 2022-05-24
- Federal patch deadline
- 2022-06-14
- Ransomware use
- known