ACTIVELY EXPLOITED
CVE-2017-18362: Kaseya VSA SQL Injection Vulnerability
| Vendor | Kaseya |
|---|---|
| Product | Virtual System/Server Administrator (VSA) |
| Actively exploited | Yes |
| Added to CISA KEV | 24 May 2022 |
| CISA federal deadline | 14 Jun 2022 |
| Ransomware use | Known |
| Weakness (CWE) | CWE-89 |
Required action (CISA's text)
The impacted product is end-of-life and should be disconnected if still in use.
Description (NVD)
ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.
SOURCES
Other Kaseya flaws
- CVE-2018-20753: Kaseya VSA Remote Code Execution Vulnerability
- CVE-2021-30116: Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.