CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-43035

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Two unauthenticated SQL injection vulnerabilities were discovered, allowing arbitrary SQL queries to be injected and executed under the postgres superuser account. Remote code execution was possible, leading to full access to the postgres user account.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.04

EPSS Ranking 88.0%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2021-43035

Kaseya » Unitrends Backup » Version: 10.0

cpe:2.3:a:kaseya:unitrends_backup:10.0
Kaseya » Unitrends Backup » Version: 10.1

cpe:2.3:a:kaseya:unitrends_backup:10.1
Kaseya » Unitrends Backup » Version: 10.1.1

cpe:2.3:a:kaseya:unitrends_backup:10.1.1
Kaseya » Unitrends Backup » Version: 10.2

cpe:2.3:a:kaseya:unitrends_backup:10.2
Kaseya » Unitrends Backup » Version: 10.2.1

cpe:2.3:a:kaseya:unitrends_backup:10.2.1
Kaseya » Unitrends Backup » Version: 10.3.1

cpe:2.3:a:kaseya:unitrends_backup:10.3.1
Kaseya » Unitrends Backup » Version: 10.3.10

cpe:2.3:a:kaseya:unitrends_backup:10.3.10
Kaseya » Unitrends Backup » Version: 10.3.11

cpe:2.3:a:kaseya:unitrends_backup:10.3.11
Kaseya » Unitrends Backup » Version: 10.3.2

cpe:2.3:a:kaseya:unitrends_backup:10.3.2
Kaseya » Unitrends Backup » Version: 10.3.3

cpe:2.3:a:kaseya:unitrends_backup:10.3.3
Kaseya » Unitrends Backup » Version: 10.3.4

cpe:2.3:a:kaseya:unitrends_backup:10.3.4
Kaseya » Unitrends Backup » Version: 10.3.5

cpe:2.3:a:kaseya:unitrends_backup:10.3.5
Kaseya » Unitrends Backup » Version: 10.3.6

cpe:2.3:a:kaseya:unitrends_backup:10.3.6
Kaseya » Unitrends Backup » Version: 10.3.7

cpe:2.3:a:kaseya:unitrends_backup:10.3.7
Kaseya » Unitrends Backup » Version: 10.3.8

cpe:2.3:a:kaseya:unitrends_backup:10.3.8
Kaseya » Unitrends Backup » Version: 10.3.9

cpe:2.3:a:kaseya:unitrends_backup:10.3.9
Kaseya » Unitrends Backup » Version: 10.4.0

cpe:2.3:a:kaseya:unitrends_backup:10.4.0
Kaseya » Unitrends Backup » Version: 10.4.1

cpe:2.3:a:kaseya:unitrends_backup:10.4.1
Kaseya » Unitrends Backup » Version: 10.4.10

cpe:2.3:a:kaseya:unitrends_backup:10.4.10
Kaseya » Unitrends Backup » Version: 10.4.11

cpe:2.3:a:kaseya:unitrends_backup:10.4.11
Kaseya » Unitrends Backup » Version: 10.4.2

cpe:2.3:a:kaseya:unitrends_backup:10.4.2
Kaseya » Unitrends Backup » Version: 10.4.3

cpe:2.3:a:kaseya:unitrends_backup:10.4.3
Kaseya » Unitrends Backup » Version: 10.4.4

cpe:2.3:a:kaseya:unitrends_backup:10.4.4
Kaseya » Unitrends Backup » Version: 10.4.5

cpe:2.3:a:kaseya:unitrends_backup:10.4.5
Kaseya » Unitrends Backup » Version: 10.4.6

cpe:2.3:a:kaseya:unitrends_backup:10.4.6
Kaseya » Unitrends Backup » Version: 10.4.7

cpe:2.3:a:kaseya:unitrends_backup:10.4.7
Kaseya » Unitrends Backup » Version: 10.4.8

cpe:2.3:a:kaseya:unitrends_backup:10.4.8
Kaseya » Unitrends Backup » Version: 10.4.9

cpe:2.3:a:kaseya:unitrends_backup:10.4.9
Kaseya » Unitrends Backup » Version: 10.5.0

cpe:2.3:a:kaseya:unitrends_backup:10.5.0
Kaseya » Unitrends Backup » Version: 10.5.1

cpe:2.3:a:kaseya:unitrends_backup:10.5.1
Kaseya » Unitrends Backup » Version: 10.5.2

cpe:2.3:a:kaseya:unitrends_backup:10.5.2
Kaseya » Unitrends Backup » Version: 10.5.3

cpe:2.3:a:kaseya:unitrends_backup:10.5.3
Kaseya » Unitrends Backup » Version: 10.5.4

cpe:2.3:a:kaseya:unitrends_backup:10.5.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-43035

Products

Pricing

Contact Us