MEDIUM🇵🇱 Wersja polska

CVE-2015-2863

CVSS 4.3v2.0pub. 2015-07-20upd. 2026-05-06

Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

CVSS Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Kaseya Virtual System Administrator

    APP
    Kaseya
    7.0 – 7.0.0.29 (bez)8.0 – 8.0.0.18 (bez)9.0 – 9.0.0.14 (bez)9.1 – 9.1.0.4 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-20753CRITICAL9.8⚠ KEVten sam produkt

Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote ...

CVE-2015-6922CRITICAL9.8ten sam produkt

Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9...

CVE-2015-6589HIGH8.8ten sam produkt

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0...

CVE-2019-15506HIGH7.5ten sam produkt

An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37. It has a critical infor...

CVE-2017-12410HIGH7.4ten sam produkt

It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition whe...