SysAid

Records41All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

SysAid records in CISA KEV

TI-2025-02426 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CRITICAL 97KEV 2025-07-22 TI-2025-02427 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CRITICAL 99KEV 2025-07-22 TI-2023-25564 SysAid Server Path Traversal Vulnerability CRITICAL 100KEV 2023-11-13

Components

Products in the NVD configurations · select one to filter the records

Sysaid 29 records CRITICAL Help Desk 4 records LOW Sysaid On-premises 3 records MEDIUM Application Programming Interface 1 record LOW Itil 1 record LOW Okta Sso 1 record MEDIUM On-premise 1 record MEDIUM Sysaidsy On-premises 1 record LOW

Records

1 record in On-premise · all components

TI-2020-08484 CVE-2020-10569 · GHSA-66pv-97pv-f4qx

SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable…

MEDIUM 55

SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03255 Published 2020-04-21 No fix listed CWE-434

Open these records in search →