All CVE records
CVE-2017-18362 — Kaseya VSA SQL Injection Vulnerability
Known ransomware use
CISA KEV listed
Added May 24, 2022 Remediate by June 14, 2022
Description
ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Notes
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.