[ Vendor · 4 CVEs ]
SysAid
CVEs affecting SysAid published in the last 30 days, plus any SysAid CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-2775 | 7 May 2025 | CVSS 7.5 | SysAid On-Prem Improper Restriction of XML External Entity ReferenceSysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing… | Exploited |
| CVE-2025-2776 | 7 May 2025 | CVSS 9.8 | SysAid On-Prem Improper Restriction of XML External Entity ReferenceSysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing… | Exploited |
| CVE-2023-47246 | 10 Nov 2023 | CVSS 9.8 | SysAid Server Path TraversalIn SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as… | Exploited |
| CVE-2023-47246 | 10 Nov 2023 | CVSS 9.8 | SysAid Server Path TraversalIn SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as… | Exploited |