Skip to content
Noroxi

SysAid records

40 published records for vendor sysaid.

Researcher profile

Entered KEV
3 · 7.5%
Weaponized
9 · 22.5%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
76 days

Records by year

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

40 records
  • CVE-2023-47246
    99Now

    In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat we

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    sysaid · sysaidNov 10, 2023

  • CVE-2025-2776
    88Now

    SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection

    CriticalCVSS 9.8KEVWeaponizedEPSS 64%

    sysaid · sysaidMay 7, 2025

  • CVE-2025-2775
    73This week

    SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection

    HighCVSS 7.5KEVWeaponizedEPSS 43%

    sysaid · sysaidMay 7, 2025

  • CVE-2025-2777
    61This week

    SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection

    CriticalCVSS 9.8Proof of conceptEPSS 72%

    sysaid · sysaidMay 7, 2025

  • CVE-2015-2996
    60This week

    Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a ..

    HighCVSS 8.5WeaponizedEPSS 87%

    sysaid · sysaidJun 8, 2015

  • CVE-2015-2993
    47Plan

    SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create adminis

    HighCVSS 7.5WeaponizedEPSS 55%

    sysaid · sysaidJun 8, 2015

  • CVE-2015-2994
    41Plan

    Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary

    MediumCVSS 6.5WeaponizedEPSS 50%

    sysaid · sysaidJun 8, 2015

  • CVE-2020-10569
    40Plan

    SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack.

    CriticalCVSS 9.8No exploitEPSS 3%

    sysaid · on-premiseApr 21, 2020

  • CVE-2022-22796
    39Monitor

    Sysaid – Sysaid System Takeover

    CriticalCVSS 9.8No exploitEPSS 1%

    sysaid · sysaidMay 12, 2022

  • CVE-2022-23166
    39Monitor

    Sysaid – Sysaid Local File Inclusion (LFI)

    CriticalCVSS 9.8No exploitEPSS 1%

    sysaid · sysaidMay 12, 2022

  • CVE-2024-36394
    39Monitor

    SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

    CriticalCVSS 9.8No exploitEPSS 1%

    sysaid · sysaidJun 6, 2024

  • CVE-2022-23170
    39Monitor

    SysAid - Okta SSO integration

    CriticalCVSS 9.8No exploitEPSS 1%

    sysaid · okta ssoJun 24, 2022

  • CVE-2024-36393
    39Monitor

    SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

    CriticalCVSS 9.8No exploitEPSS 0%

    sysaid · sysaidJun 6, 2024

  • CVE-2015-2997
    37Monitor

    SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getA

    MediumCVSS 5.0WeaponizedEPSS 57%

    sysaid · sysaidJun 8, 2015

  • CVE-2015-2995
    37Monitor

    The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload an

    MediumCVSS 6.8WeaponizedEPSS 34%

    sysaid · sysaidJun 8, 2015

  • CVE-2021-43971
    36Monitor

    A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitr

    HighCVSS 8.8No exploitEPSS 2%

    sysaid · sysaidJan 11, 2022

  • CVE-2021-43973
    36Monitor

    An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload a

    HighCVSS 8.8No exploitEPSS 2%

    sysaid · sysaidJan 11, 2022

  • CVE-2021-30486
    35Monitor

    SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (P

    HighCVSS 8.8No exploitEPSS 1%

    sysaid · sysaidJul 22, 2021

  • CVE-2022-22798
    35Monitor

    Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control

    HighCVSS 8.8No exploitEPSS 1%

    sysaid · sysaidMay 12, 2022

  • CVE-2015-3000
    33Monitor

    SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested

    HighCVSS 7.8Proof of conceptEPSS 8%

    sysaid · sysaidJun 8, 2015

  • CVE-2015-2998
    28Monitor

    SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as

    MediumCVSS 5.0WeaponizedEPSS 26%

    sysaid · sysaidJun 8, 2015

  • CVE-2023-32225
    28Monitor

    Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type

    HighCVSS 7.2No exploitEPSS 1%

    sysaid · sysaid on-premisesJul 30, 2023

  • CVE-2015-2999
    27Monitor

    Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary SQL commands via the

    MediumCVSS 6.5Proof of conceptEPSS 2%

    sysaid · sysaidJun 8, 2015

  • CVE-2021-43972
    26Monitor

    An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to

    MediumCVSS 6.5No exploitEPSS 1%

    sysaid · sysaidJan 11, 2022

  • CVE-2023-33706
    26Monitor

    SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIfr

    MediumCVSS 6.5No exploitEPSS 1%

    sysaid · sysaidNov 23, 2023