SysAid vulnerabilities
15 published CVEs name SysAid among the affected products; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 15
- Last 12 months
- 0
- Critical
- 6
- Known exploited
- 2
Critical 6High 3Medium 6Low 0Not scored 0
CVEs per yearBy the year they were published
- 20211
- 20226
- 20232
- 20243
- 20253
Known exploitedNewest addition to KEV first
- CVE-2025-2776
SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection
SysAid · SysAid On-Prem
ExploitedCritical9.3 - CVE-2025-2775
SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
SysAid · SysAid On-Prem
ExploitedCritical9.3
Newest CVEs
- CVE-2025-2777
SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection
SysAid · SysAid On-Prem
Critical9.3 - CVE-2025-2776
SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection
SysAid · SysAid On-Prem
ExploitedCritical9.3 - CVE-2025-2775
SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
SysAid · SysAid On-Prem
ExploitedCritical9.3 - CVE-2024-36394
SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Sysaid · SysAid
Critical9.1 - CVE-2024-36393
SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Sysaid · SysAid
Critical9.9 - CVE-2024-27775
SysAid - CWE-918: Server-Side Request Forgery (SSRF)
SysAid · SysAid
High7.2 - CVE-2023-32226
Sysaid - CWE-552: Files or Directories Accessible to External Parties
Sysaid · Sysaid
High8.3 - CVE-2023-32225
Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type
Sysaid · Sysaid
Critical9.8 - CVE-2022-23170
SysAid - Okta SSO integration
Sysaid · SysAid - Okta SSO integration
Medium5.9 - CVE-2022-23166
Sysaid – Sysaid Local File Inclusion (LFI)
SysAid · Sysaid
Medium6.1