Known vulnerabilities in Professional Services Automation (PSA)

Vendor: ConnectWise
Software: Professional Services Automation (PSA)
Software CPE: cpe:2.3:a:connectwise:psa:*:*:*:*:*:*:*:*
Website: https://www.connectwise.com/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Professional Services Automation (PSA) Professional Services Automation (PSA) is affected by 3 known vulnerabilities: 1 medium, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121626 - Sensitive Cookie Without 'HttpOnly' Flag
CVE-2026-0696		 CWE-1004 Low
No
No
 2026.1 16.01.2026 SB20260116108
#VU121625 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-0695		 CWE-79 Low
No
No
 2026.1 16.01.2026 SB20260116108
#VU113030 - Insertion of Sensitive Information Into Sent Data
CVE-2025-7204		 CWE-201 Medium
No
No
 2025.9 17.07.2025 SB2025071782