Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
SysAid

SysAid SysAid On-Prem vulnerabilities

3 published CVEs name SysAid SysAid On-Prem among the affected products; CISA lists 2 of them as exploited in the wild.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
0
Critical
3
Known exploited
2

Critical 3High 0Medium 0Low 0Not scored 0

Known exploitedNewest addition to KEV first

  • CVE-2025-2776

    SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection

    SysAid · SysAid On-Prem

    ExploitedCritical9.3
  • CVE-2025-2775

    SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection

    SysAid · SysAid On-Prem

    ExploitedCritical9.3

Newest CVEs

  • CVE-2025-2777

    SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection

    SysAid · SysAid On-Prem

    Critical9.3
  • CVE-2025-2776

    SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection

    SysAid · SysAid On-Prem

    ExploitedCritical9.3
  • CVE-2025-2775

    SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection

    SysAid · SysAid On-Prem

    ExploitedCritical9.3

Most common weaknesses

  1. CWE-611 XML external entity (XXE)3