CVE-2015-2863

Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

10.32% chance of exploitation in the next 30 days, 95th percentile

Nuclei

medium · CWE-601

Published

2015-07-20

Updated

2024-08-06

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2863.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/37621

References

• CVE Record
• NVD entry

Related

• CVE-2015-2862
• CVE-2015-2866
• CVE-2015-2857
• CVE-2015-2878
• CVE-2015-2845
• CVE-2015-2898