CVE-2017-18362

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all...

CVE-2017-18362

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all...

CVE-2017-18362

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all...

Veeam Availability Console U1 Cumulative Patch 1913

Challenge Veeam Availability Console U1 Cumulative Patch 1913. This update supersedes Veeam Availability Console U1 Cumulative Patch 1850. Cause Please confirm you are running version 2.0.2.1750 or later prior to installing this cumulative patch 1913. You can check this under Windows Programs and...

Veeam Availability Console U1 Cumulative Patch 1850

Challenge Veeam Availability Console U1 Cumulative Patch 1850. This update supersedes Veeam Availability Console U1 Cumulative Patch 1824. Cause Please confirm you are running version 2.0.2.1750 or later prior to installing this cumulative patch 1850. You can check this under Windows Programs and...

Veeam Availability Console U1 Cumulative Patch 1824

Challenge Veeam Availability Console U1 Cumulative Patch 1824. This update supersedes Veeam Availability Console U1 Cumulative Patch 1817. Cause Please confirm you are running version 2.0.2.1750 or later prior to installing this cumulative patch 1824. You can check this under Windows Programs and...

Veeam Service Provider Console – Compile and Upload ConnectWise Manage Plugin Logs

This article covers how to properly compile your Veeam Service Provider Console ConnectWise Manage Plugin logs...

Veeam Availability Console U1 Cumulative Patch 1817

Challenge Veeam Availability Console U1 Cumulative Patch 1817. This update supersedes Veeam Availability Console U1 Cumulative Patch 1807. Cause Please confirm you are running version 2.0.2.1750 or later prior to installing this cumulative patch 1817. You can check this under Windows Programs and...

Veeam Availability Console U1 Cumulative Patch 1807

Challenge Veeam Availability Console U1 Cumulative Patch 1807. Cause Please confirm you are running version 2.0.2.1750 or later prior to installing this cumulative patch 1807. You can check this under Windows Programs and features. After upgrading, your build will be version 2.0.2.1807. Solution...

ConnectWise Manage Cross-Site Scripting Vulnerability

ConnectWise Manage is a suite of business management solutions from ConnectWise USA. The solution provides process management, technology control and automated service delivery. A cross-site scripting vulnerability exists in services/systemio/actionprocessor/Contact.rails in ConnectWise Manage...

ConnectWise Manage Cross-Site Request Forgery Vulnerability

ConnectWise Manage is a suite of business management solutions from ConnectWise USA. The solution provides process management, technology control and automated service delivery. A cross-site request forgery vulnerability exists in services/systemio/actionprocessor/System.rails in ConnectWise Mana...

CVE-2017-11726

services/systemio/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery CSRF, as demonstrated by changing an e-mail address setting...

CVE-2017-11727

services/systemio/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution involving a ContactCommon field on victims who click on a crafted link, aka XSS...

Cross site scripting

services/systemio/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution involving a ContactCommon field on victims who click on a crafted link, aka XSS...

Cross site request forgery (csrf)

services/systemio/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery CSRF, as demonstrated by changing an e-mail address setting...

CVE-2017-11726

services/systemio/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery CSRF, as demonstrated by changing an e-mail address setting...

CVE-2017-11727

services/systemio/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution involving a ContactCommon field on victims who click on a crafted link, aka XSS...

CVE-2017-11726

services/systemio/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery CSRF, as demonstrated by changing an e-mail address setting...

CVE-2017-11727

ConnectWise Manage 2017.5 is affected by a cross-site scripting vulnerability in the component services/system_io/actionprocessor/Contact.rails, exploitable when a victim clicks a specially crafted link that leverages a ContactCommon field to inject arbitrary client-side JavaScript. The issue is ...

CVE-2017-11726

ConnectWise Manage 2017.5 contains a Cross-Site Request Forgery (CSRF) vulnerability in services/system_io/actionprocessor/System.rails. The issue allows an attacker to induce unauthorized actions, demonstrated by changing an e-mail address setting. Public details across multiple sources confirm ...