Vulnerabilities

TI-2022-19161 CVE-2022-40325 · GHSA-c923-4249-653h

SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.

LOW 28

SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00453 Published 2022-09-11 No fix listed CWE-79

TI-2022-19160 CVE-2022-40324 · GHSA-g7gc-274p-xj2q

LOW 28

SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00453 Published 2022-09-11 No fix listed CWE-79

TI-2022-19159 CVE-2022-40323 · GHSA-hmfj-g5v2-m2g2

LOW 28

SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00453 Published 2022-09-11 No fix listed CWE-79

TI-2022-19158 CVE-2022-40322 · GHSA-85h3-rvgg-cp7q

LOW 28

SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00453 Published 2022-09-11 No fix listed CWE-79