CVE-2021-30116CISA KEVEPSS p99.7%

CVE-2021-30116Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability

Kaseya / Virtual System/Server Administrator (VSA)

Description

Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.

Scoring

CVSS 10.0 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS85.73% probability of exploitation · percentile 99.7% · 2026-10-01T12:00:22Z
Last modified2026-08-14

CISA KEV entry

Added to KEV: 2021-11-03

(incoming)1

TypeTargetConfidenceTier
KEVEntryKaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerabilitykev-cve-2021-301160%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Kaseya VSA Remote Code Execution Vulnerability
CVE
Kaseya VSA SQL Injection Vulnerability
CVE
CVE-2026-42972
CVE
VMware vCenter Server Information Disclosure Vulnerability
CVE
CVE-2026-41031
CVE
VMware Multiple Products Privilege Escalation Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.