Vulnerabilities > Kaseya > Critical

DATE CVE VULNERABILITY TITLE RISK
2017-08-07 CVE-2017-12478 Improper Authentication vulnerability in Kaseya Unitrends Backup
It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated.
network
low complexity
kaseya CWE-287
critical
10.0
2017-08-07 CVE-2017-12477 Improper Authentication vulnerability in Kaseya Unitrends Backup
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed.
network
low complexity
kaseya CWE-287
critical
10.0