SY
Product
Sysaid
On CISA KEVExploited in the wildRansomware-linked
29
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 5Medium 7Low 0
Watch
Add Sysaid to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-2776 In wildKEV | 9.8 | May 7 | SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection Affected: through 23.3.40 |
| CVE-2023-47246 RansomwareIn wildKEV | 9.8 | Nov 10 | SysAid Server Path Traversal Vulnerability Affected: before 23.3.36 |
| CVE-2025-2775 In wildKEV | 7.5 | May 7 | SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection Affected: through 23.3.40 |
| CVE-2025-2777 | 9.8 | May 7 | SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing functionality, allowing for administrator… Affected: through 23.3.40 |
| CVE-2024-36394 | 9.8 | Jun 6 | SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Affected: through 23.3.38 |
| CVE-2024-36393 | 9.8 | Jun 6 | SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affected: through 23.3.38 |
| CVE-2022-23166 | 9.8 | May 12 | Sysaid – Sysaid Local File Inclusion (LFI) – An unauthenticated attacker can access to the system by accessing to "/lib/tinymce/examples/index.html" path Affected: before 22.1.64; before 22.2.20 |
| CVE-2022-22796 | 9.8 | May 12 | Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button,… Affected: before 21.1.30; before 21.4.45 |
| CVE-2022-22798 | 8.8 | May 12 | Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control v20.4.74 b10, v22.1.20 b62, v22.1.30 b49 - An attacker needs to log in as a guest after that the system redirects… Affected: before 21.1.50; before 22.1.64 |
| CVE-2021-43973 | 8.8 | Jan 11 | An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload an arbitrary file via the file parameter… Affected: 20.4.74 |
| CVE-2021-43971 | 8.8 | Jan 11 | A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText… Affected: 20.4.74 |
| CVE-2021-30486 | 8.8 | Jul 22 | SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (POST group1), AssetManagementList.jsp… Affected: 20.3.64 |
| CVE-2023-33706 | 6.5 | Nov 24 | SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to… Affected: before 23.2.15; before 23.2.50 |
| CVE-2021-43972 | 6.5 | Jan 11 | An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server… Affected: 20.4.74 |
| CVE-2022-23165 | 6.1 | May 12 | Sysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS) - The parameter "helpPageName" used by the page "/help/treecontent.jsp" suffers from a Reflected Cross-Site Scripting… Affected: before 22.1.64; before 22.2.20 |
| CVE-2022-22797 | 6.1 | May 12 | Sysaid – sysaid Open Redirect - An Attacker can change the redirect link at the parameter "redirectURL" from"GET" request from the url location:… Affected: before 22.1.50; before 22.1.64 |
| CVE-2021-31862 | 6.1 | Oct 29 | SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication Affected: 20.4.74 |
| CVE-2021-30049 | 6.1 | Jul 22 | SysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI Affected: 20.3.64 |
| CVE-2023-47247 | 4.3 | Dec 25 | In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102 Affected: before 23.3.34 |
| CVE-2015-3001 | – | Jun 8 | SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access… Affected: through 15.1 |
| CVE-2015-3000 | – | Jun 8 | SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested entity references in an XML document to… Affected: through 15.1 |
| CVE-2015-2999 | – | Jun 8 | Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary SQL commands via the (1) groupFilter parameter in an… Affected: through 15.1 |
| CVE-2015-2998 | – | Jun 8 | SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstrated by decrypting the… Affected: through 15.1 |
| CVE-2015-2997 | – | Jun 8 | SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large… Affected: through 15.1 |
| CVE-2015-2996 | – | Jun 8 | Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a Affected: through 15.1 |
| CVE-2015-2995 | – | Jun 8 | The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute arbitrary files via a NULL… Affected: through 15.1 |
| CVE-2015-2994 | – | Jun 8 | Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp… Affected: through 15.1 |
| CVE-2015-2993 | – | Jun 8 | SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request… Affected: through 15.1 |
| CVE-2014-9436 | – | Jan 2 | Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\\\ (four backslashes) in the fileName parameter to… Affected: through 14.4 |
Showing 29