Exploited vulnerabilities

Kaseya

3 Kaseya vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue3
Last 12 months0
In ransomware campaigns3
Last addition24 May 2022

The vulnerabilities3

  1. 24 May 2022CVE-2017-18362Virtual System/Server Administrator (VSA)Kaseya VSA SQL Injection VulnerabilityRansomware
  2. 13 April 2022CVE-2018-20753Virtual System/Server Administrator (VSA)Kaseya VSA Remote Code Execution VulnerabilityRansomware
  3. 3 November 2021CVE-2021-30116Virtual System/Server Administrator (VSA)Kaseya Virtual System/Server Administrator (VSA) Information Disclosure VulnerabilityRansomware

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Kaseya included.

All vendorsThe catalogue on the CISA website