CVE-2015-2862

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 9.5%

from disclosure to weapon0 days

Published on NVDJul 20

1st PoCJul 15

exploitation probability

9.5%top 5% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users to read arbitrary files via a crafted HTTP request.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/37621unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://www.kb.cert.org/vuls/id/919604