SysAid Sysaid vulnerabilities

CVEs per yearBy the year they were published

1. 20225
2. 20232
3. 20243

Newest CVEs

• CVE-2024-36394

  SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

  Sysaid · SysAid

  Critical9.1
• CVE-2024-36393

  SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

  Sysaid · SysAid

  Critical9.9
• CVE-2024-27775

  SysAid - CWE-918: Server-Side Request Forgery (SSRF)

  SysAid · SysAid

  High7.2
• CVE-2023-32226

  Sysaid - CWE-552: Files or Directories Accessible to External Parties

  Sysaid · Sysaid

  High8.3
• CVE-2023-32225

  Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type

  Sysaid · Sysaid

  Critical9.8
• CVE-2022-23166

  Sysaid – Sysaid Local File Inclusion (LFI)

  SysAid · Sysaid

  Medium6.1
• CVE-2022-23165

  Sysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS)

  SysAid · Sysaid

  Medium5.5
• CVE-2022-22798

  Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control

  SysAid · Sysaid

  Medium6.8
• CVE-2022-22797

  Sysaid – sysaid Open Redirect

  SysAid · Sysaid

  Medium4.6
• CVE-2022-22796

  Sysaid – Sysaid System Takeover

  SysAid · Sysaid

  High7.0