Read the docs

SysAid

Records41All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

SysAid records in CISA KEV
TI-2025-02426 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability Priority CRITICAL 97KEV 2025-07-22TI-2025-02427 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability Priority CRITICAL 99KEV 2025-07-22TI-2023-25564 SysAid Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2023-11-13

Components

Products in the NVD configurations · select one to filter the records
Sysaid 29 records CRITICAL Help Desk 4 records LOW Sysaid On-premises 3 records MEDIUM Application Programming Interface 1 record LOW Itil 1 record LOW Okta Sso 1 record MEDIUM On-premise 1 record MEDIUM Sysaidsy On-premises 1 record LOW

Records

1 record in Application Programming Interface · all components

TI-2021-14859 CVE-2021-36721 · GHSA-3fmg-j52q-2cm9

Sysaid - Sysaid API User Enumeration

Priority LOW 24

Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00459 Published 2021-12-14 No fix listed
Open these records in search →