Skip to content
Sysaid vulnerabilities
Newest
-
sysaid, sysaid on-prem +1 more
SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection
CVE-2025-2777
EPSS 72.9%
9.3 Critical
-
sysaid, sysaid on-prem +1 more
SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection
CVE-2025-2776
In KEVPublic exploit
EPSS 64.7%
9.3 Critical
-
sysaid, sysaid on-prem +1 more
SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
CVE-2025-2775
In KEVPublic exploit
EPSS 42.6%
9.3 Critical
-
sysaid
SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-36394
9.1 Critical
-
sysaid
SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36393
9.9 Critical
-
sysaid
SysAid - CWE-918: Server-Side Request Forgery (SSRF)
CVE-2024-27775
7.2 High
-
sysaid
In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete...
CVE-2023-47247
4.3 Medium
-
sysaid
SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a...
CVE-2023-33706
6.5 Medium
-
sysaid, sysaid server, on-premises +2 more
In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after...
CVE-2023-47246
In KEVPublic exploit
EPSS 98.9%
9.8 Critical
-
sysaid, sysaid on-premises +1 more
Sysaid - CWE-552: Files or Directories Accessible to External Parties
CVE-2023-32226
8.3 High
-
sysaid, sysaid on-premises +1 more
Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type
CVE-2023-32225
9.8 Critical
-
sysaid help desk
SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.
CVE-2022-40325
6.1 Medium
-
sysaid help desk
SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.
CVE-2022-40324
6.1 Medium
-
sysaid help desk
SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.
CVE-2022-40323
6.1 Medium
-
sysaid help desk
SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579.
CVE-2022-40322
6.1 Medium
-
sysaid okta sso, - okta sso integration +1 more
SysAid - Okta SSO integration
CVE-2022-23170
5.9 Medium
-
sysaid
Sysaid – Sysaid Local File Inclusion (LFI)
CVE-2022-23166
6.1 Medium
-
sysaid
Sysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS)
CVE-2022-23165
5.5 Medium
-
sysaid
Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control
CVE-2022-22798
6.8 Medium
-
sysaid
Sysaid – sysaid Open Redirect
CVE-2022-22797
4.6 Medium
-
sysaid
Sysaid – Sysaid System Takeover
CVE-2022-22796
7.0 High
-
sysaid itil
An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register...
CVE-2021-43974
5.3 Medium
-
sysaid
An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows...
CVE-2021-43973
8.8 High
-
sysaid
An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74...
CVE-2021-43972
6.5 Medium
-
sysaid
A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a...
CVE-2021-43971
8.8 High
-
sysaid api, application programming interface +1 more
Sysaid - Sysaid API User Enumeration
CVE-2021-36721
4.4 Medium
-
sysaid
SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication.
CVE-2021-31862
Public exploit
6.1 Medium
-
sysaid
SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp ...
CVE-2021-30486
8.8 High
-
sysaid
SysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI.
CVE-2021-30049
6.1 Medium
-
sysaid on-premises, sysaidsy on-premises +1 more
SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter.
CVE-2020-13168
6.1 Medium
-
sysaid on-premise
SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a...
CVE-2020-10569
Disputed
9.8 Critical
-
sysaid
SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express...
CVE-2015-3001
Public exploit
5.0 Medium
-
sysaid
SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory...
CVE-2015-3000
Public exploit
7.8 High
-
sysaid
Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote...
CVE-2015-2999
Public exploit
6.5 Medium
-
sysaid
SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote...
CVE-2015-2998
Public exploit
EPSS 26.2%
5.0 Medium
-
sysaid
SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an...
CVE-2015-2997
Public exploit
EPSS 57.0%
5.0 Medium
-
sysaid
Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote...
CVE-2015-2996
Public exploit
EPSS 86.5%
8.5 High
-
sysaid
The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions,...
CVE-2015-2995
Public exploit
EPSS 33.6%
6.8 Medium
-
sysaid
Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows...
CVE-2015-2994
Public exploit
EPSS 49.8%
6.5 Medium
-
sysaid
SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which...
CVE-2015-2993
Public exploit
EPSS 55.1%
7.5 High
-
sysaid
Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers...
CVE-2014-9436
Public exploit
5.0 Medium