SysAid

Records41All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

SysAid records in CISA KEV

TI-2025-02426 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CRITICAL 97KEV 2025-07-22 TI-2025-02427 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CRITICAL 99KEV 2025-07-22 TI-2023-25564 SysAid Server Path Traversal Vulnerability CRITICAL 100KEV 2023-11-13

Components

Products in the NVD configurations · select one to filter the records

Sysaid 29 records CRITICAL Help Desk 4 records LOW Sysaid On-premises 3 records MEDIUM Application Programming Interface 1 record LOW Itil 1 record LOW Okta Sso 1 record MEDIUM On-premise 1 record MEDIUM Sysaidsy On-premises 1 record LOW

Records

1 record in Okta Sso · all components

TI-2022-07326 CVE-2022-23170 · GHSA-5pxw-mxgg-m48c

XML external entity injection in SysAid - Okta SSO integration

MEDIUM 43

SysAid - Okta SSO integration - was found vulnerable to XML External Entity Injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00659 Published 2022-06-24 No fix listed CWE-611

Open these records in search →