VDB
CVE-2015-2863
CVE-2015-2863
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
EPSS 49.04% · 97.8th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
49.04%
97.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| kaseya | virtual_system_administrator | 7.0, 8.0, 9.0 |
Timeline
- Jul 20, 2015 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Oct 27, 2024 PoC Published
- Nov 9, 2024 PoC Published
- Jan 20, 2025 PoC Published
- Feb 5, 2025 PoC Published
- Mar 17, 2025 EPSS Score
- Mar 20, 2025 EPSS Score
- Mar 23, 2025 EPSS Score
- Mar 28, 2025 PoC Published
- Mar 29, 2025 EPSS Score
References
- VU#919604 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2015-2863 advisory