CVE-2015-2862

MEDIUM 4.0CVE-2015-2862 · Published 20/07/2015 · updated 17/06/2026

In short

CVE-2015-2862 is a MEDIUM (CVSS 4.0) vulnerability affecting virtual system administrator (kaseya).
Chance of exploitation in the next 30 days (EPSS): 9.4%, higher than 95.4% of all vulnerabilities.
Fix: update to 7.0.0.29, 8.0.0.18, 9.0.0.14, 9.1.0.4 or later.

Package	Affected versions	Patched versions
virtual system administrator kaseya	`≥ 7.0, < 7.0.0.29≥ 8.0, < 8.0.0.18≥ 9.0, < 9.0.0.14≥ 9.1, < 9.1.0.4`	`7.0.0.298.0.0.189.0.0.149.1.0.4`

Description

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users to read arbitrary files via a crafted HTTP request.

References

kb.cert.org/vuls/id/919604 · Third Party Advisory

More vulnerabilities in virtual system administrator

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

virtual system administrator

kaseya

≥ 7.0, < 7.0.0.29≥ 8.0, < 8.0.0.18≥ 9.0, < 9.0.0.14≥ 9.1, < 9.1.0.4

7.0.0.298.0.0.189.0.0.149.1.0.4

More vulnerabilities in virtual system administrator

See all →