İçeriğe atla
Noroxi

sysaid kayıtları

sysaid üreticisine ait 40 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
3 · %7,5
Silahlaştırılmış
9 · %22,5
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
76 gün

Yıllara göre kayıt

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

40 kayıt
  • CVE-2023-47246
    99Hemen

    In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat we

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    sysaid · sysaid10 Kas 2023

  • CVE-2025-2776
    88Hemen

    SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %64

    sysaid · sysaid7 May 2025

  • CVE-2025-2775
    73Bu hafta

    SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %43

    sysaid · sysaid7 May 2025

  • CVE-2025-2777
    61Bu hafta

    SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %72

    sysaid · sysaid7 May 2025

  • CVE-2015-2996
    60Bu hafta

    Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a ..

    YüksekCVSS 8,5SilahlaştırılmışEPSS %87

    sysaid · sysaid8 Haz 2015

  • CVE-2015-2993
    47Planlayın

    SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create adminis

    YüksekCVSS 7,5SilahlaştırılmışEPSS %55

    sysaid · sysaid8 Haz 2015

  • CVE-2015-2994
    41Planlayın

    Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary

    OrtaCVSS 6,5SilahlaştırılmışEPSS %50

    sysaid · sysaid8 Haz 2015

  • CVE-2020-10569
    40Planlayın

    SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack.

    KritikCVSS 9,8İstismar yokEPSS %3

    sysaid · on-premise21 Nis 2020

  • CVE-2022-22796
    39İzleyin

    Sysaid – Sysaid System Takeover

    KritikCVSS 9,8İstismar yokEPSS %1

    sysaid · sysaid12 May 2022

  • CVE-2022-23166
    39İzleyin

    Sysaid – Sysaid Local File Inclusion (LFI)

    KritikCVSS 9,8İstismar yokEPSS %1

    sysaid · sysaid12 May 2022

  • CVE-2024-36394
    39İzleyin

    SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

    KritikCVSS 9,8İstismar yokEPSS %1

    sysaid · sysaid6 Haz 2024

  • CVE-2022-23170
    39İzleyin

    SysAid - Okta SSO integration

    KritikCVSS 9,8İstismar yokEPSS %1

    sysaid · okta sso24 Haz 2022

  • CVE-2024-36393
    39İzleyin

    SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

    KritikCVSS 9,8İstismar yokEPSS %0

    sysaid · sysaid6 Haz 2024

  • CVE-2015-2997
    37İzleyin

    SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getA

    OrtaCVSS 5,0SilahlaştırılmışEPSS %57

    sysaid · sysaid8 Haz 2015

  • CVE-2015-2995
    37İzleyin

    The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload an

    OrtaCVSS 6,8SilahlaştırılmışEPSS %34

    sysaid · sysaid8 Haz 2015

  • CVE-2021-43971
    36İzleyin

    A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitr

    YüksekCVSS 8,8İstismar yokEPSS %2

    sysaid · sysaid11 Oca 2022

  • CVE-2021-43973
    36İzleyin

    An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload a

    YüksekCVSS 8,8İstismar yokEPSS %2

    sysaid · sysaid11 Oca 2022

  • CVE-2021-30486
    35İzleyin

    SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (P

    YüksekCVSS 8,8İstismar yokEPSS %1

    sysaid · sysaid22 Tem 2021

  • CVE-2022-22798
    35İzleyin

    Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control

    YüksekCVSS 8,8İstismar yokEPSS %1

    sysaid · sysaid12 May 2022

  • CVE-2015-3000
    33İzleyin

    SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested

    YüksekCVSS 7,8Kavram kanıtıEPSS %8

    sysaid · sysaid8 Haz 2015

  • CVE-2015-2998
    28İzleyin

    SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as

    OrtaCVSS 5,0SilahlaştırılmışEPSS %26

    sysaid · sysaid8 Haz 2015

  • CVE-2023-32225
    28İzleyin

    Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type

    YüksekCVSS 7,2İstismar yokEPSS %1

    sysaid · sysaid on-premises30 Tem 2023

  • CVE-2015-2999
    27İzleyin

    Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary SQL commands via the

    OrtaCVSS 6,5Kavram kanıtıEPSS %2

    sysaid · sysaid8 Haz 2015

  • CVE-2021-43972
    26İzleyin

    An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to

    OrtaCVSS 6,5İstismar yokEPSS %1

    sysaid · sysaid11 Oca 2022

  • CVE-2023-33706
    26İzleyin

    SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIfr

    OrtaCVSS 6,5İstismar yokEPSS %1

    sysaid · sysaid23 Kas 2023