{"cvss":9.8,"datePublished":"2019-02-08T00:00:00Z","dateUpdated":"2019-02-08T00:00:00Z","description":"ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.","dueDate":"2022-06-14T00:00:00Z","id":"CVE-2017-18362","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"Virtual System/Server Administrator (VSA)","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","severity":"CRITICAL","source":"vulncheck_kev","title":"Kaseya VSA SQL Injection Vulnerability","vendor":"Kaseya"}