Vulnerability in Kaseya Virtual_system_administrator

CVE-2015-2863

Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote attackers to redirect users to arbitrary web sites and conduct phi…

EPSS: 0.103 (95.2th percentile) — read the EPSS interpretation.

Affected products

Public proof-of-concept exploits

References

  • cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2015-2863?
CVE-2015-2863 is a vulnerability in Kaseya Virtual_system_administrator. Published 2015-07-20.
Is CVE-2015-2863 known to be exploited?
3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.