Read the docs

SysAid

Records41All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

SysAid records in CISA KEV
TI-2025-02426 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability Priority CRITICAL 97KEV 2025-07-22TI-2025-02427 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability Priority CRITICAL 99KEV 2025-07-22TI-2023-25564 SysAid Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2023-11-13

Components

Products in the NVD configurations · select one to filter the records
Sysaid 29 records CRITICAL Help Desk 4 records LOW Sysaid On-premises 3 records MEDIUM Application Programming Interface 1 record LOW Itil 1 record LOW Okta Sso 1 record MEDIUM On-premise 1 record MEDIUM Sysaidsy On-premises 1 record LOW

Records

3 records in Sysaid On-premises · all components

TI-2023-15524 CVE-2023-32225 · GHSA-64w5-mph3-q7qw

Unrestricted file upload in Sysaid

Priority MEDIUM 43

Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00649 Published 2023-07-30 Fixed in 23.2.14 b18 CWE-434
TI-2023-15525 CVE-2023-32226 · GHSA-mp6j-qh5h-ccj4

Sysaid - CWE-552: Files or Directories Accessible to External Parties

Priority LOW 37

Sysaid - CWE-552: Files or Directories Accessible to External Parties - Authenticated users may exfiltrate files from the server via an unspecified method.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00535 Published 2023-07-30 Fixed in 23.2.14 b18 CWE-552
Open these records in search →