SY
Product
Sysaid
On CISA KEVExploited in the wildRansomware-linked
29
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 5Medium 7Low 0
Watch
Add Sysaid to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-2775 In wildKEV | 7.5 | May 7 | SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection Affected: through 23.3.40 |
| CVE-2022-22798 | 8.8 | May 12 | Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control v20.4.74 b10, v22.1.20 b62, v22.1.30 b49 - An attacker needs to log in as a guest after that the system redirects… Affected: before 21.1.50; before 22.1.64 |
| CVE-2021-43973 | 8.8 | Jan 11 | An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload an arbitrary file via the file parameter… Affected: 20.4.74 |
| CVE-2021-43971 | 8.8 | Jan 11 | A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText… Affected: 20.4.74 |
| CVE-2021-30486 | 8.8 | Jul 22 | SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (POST group1), AssetManagementList.jsp… Affected: 20.3.64 |
Showing 5