CVE-2015-2863

medium · 4.3

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

4.3

CVSS

10.3%

EPSS (exploit prob.)

95th

EPSS percentile

2015-07-20

Published

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

Vendor	Product	Affected versions
kaseya	virtual_system_administrator	>= 7.0, < 7.0.0.29
kaseya	virtual_system_administrator	>= 8.0, < 8.0.0.18
kaseya	virtual_system_administrator	>= 9.0, < 9.0.0.14
kaseya	virtual_system_administrator	>= 9.1, < 9.1.0.4

Check a specific version with /api/v1/cve/match.

References

http://www.kb.cert.org/vuls/id/919604
http://www.kb.cert.org/vuls/id/919604

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-2863