BLACKOUT MAP

Kaseya: exploited vulnerabilities

AddedVulnerabilityProductSeverityAttack chance
May 24, 2022VSA SQL InjectionCVE-2017-18362used by ransomwareVirtual System/Server Administrator (VSA)Critical 9.887%
Apr 13, 2022VSA Remote Code ExecutionCVE-2018-20753used by ransomwareVirtual System/Server Administrator (VSA)Critical 9.830%
Nov 3, 2021Information DisclosureCVE-2021-30116used by ransomwareVirtual System/Server Administrator (VSA)Critical 10.086%

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.