VendorsConnectWiseprofessional_service_automationany version
Vulnerabilities

ConnectWise Professional Service Automation any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-0695
Stored XSS in Time Entry Audit Trail
Published 2026-01-16 · Modified
8.7EPSS 0.003
CVE-2026-0696
Session Cookies Missing HttpOnly Attribute
Published 2026-01-16 · Modified
6.5EPSS 0.004
CVE-2025-7204
Exposure of password hashes via API responses in ConnectWise PSA
Published 2025-07-09 · Analyzed
6.5EPSS 0.003