CVE-2025-2777 | Critical | 9.3 | 2025-05-07 | SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing functionality, allowing… |
CVE-2025-2776 | Critical | 9.3 | 2025-05-07 | SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, all… |
CVE-2025-2775 | Critical | 9.3 | 2025-05-07 | SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allow… |
CVE-2024-36394 | Critical | 9.1 | 2024-06-06 | SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') |
CVE-2024-36393 | Critical | 9.9 | 2024-06-06 | SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CVE-2024-27775 | High | 7.2 | 2024-03-28 |
SysAid before version 23.2.14 b18 - CWE-918: Server-Side Request Forgery (SSRF) may allow exposing the local OS user's NTLMv2 hash
|
CVE-2023-47247 | Medium | 4.3 | 2023-12-25 | In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102. |
CVE-2023-33706 | Medium | 6.5 | 2023-11-24 | SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modifi… |
CVE-2023-47246 | Critical | 9.8 | 2023-11-10 | In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited… |
CVE-2023-32226 | High | 8.3 | 2023-07-30 | Sysaid - CWE-552: Files or Directories Accessible to External Parties -
Authenticated users may exfiltrate files from the server via an unspecified method… |
CVE-2023-32225 | Critical | 9.8 | 2023-07-30 | Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type -
A malicious user with administrative privileges may be able to upload a dangerous filety… |
CVE-2022-40325 | Medium | 6.1 | 2022-09-11 | SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262. |
CVE-2022-40324 | Medium | 6.1 | 2022-09-11 | SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258. |
CVE-2022-40323 | Medium | 6.1 | 2022-09-11 | SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241. |
CVE-2022-40322 | Medium | 6.1 | 2022-09-11 | SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579. |
CVE-2022-23170 | Medium | 5.9 | 2022-06-24 | SysAid - Okta SSO integration - was found vulnerable to XML External Entity Injection vulnerability. Any SysAid environment that uses the Okta SSO integration… |
CVE-2022-23166 | Medium | 6.1 | 2022-05-12 | Sysaid – Sysaid Local File Inclusion (LFI) – An unauthenticated attacker can access to the system by accessing to "/lib/tinymce/examples/index.html" path. in t… |
CVE-2022-23165 | Medium | 5.5 | 2022-05-12 | Sysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS) - The parameter "helpPageName" used by the page "/help/treecontent.jsp" suffers from a Reflected Cr… |
CVE-2022-22798 | Medium | 6.8 | 2022-05-12 | Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control v20.4.74 b10, v22.1.20 b62, v22.1.30 b49 - An attacker needs to log in as a guest after that… |
CVE-2022-22797 | Medium | 4.6 | 2022-05-12 | Sysaid – sysaid Open Redirect - An Attacker can change the redirect link at the parameter "redirectURL" from"GET" request from the url location: /CommunitySSOR… |
CVE-2022-22796 | High | 7.0 | 2022-05-12 | Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click… |
CVE-2021-43974 | Medium | 5.3 | 2022-01-11 | An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side se… |
CVE-2021-43973 | High | 8.8 | 2022-01-11 | An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload an arbitrary file vi… |
CVE-2021-43972 | Medium | 6.5 | 2022-01-11 | An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary fil… |
CVE-2021-43971 | High | 8.8 | 2022-01-11 | A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands vi… |
CVE-2021-36721 | Medium | 4.4 | 2021-12-14 | Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LD… |
CVE-2021-31862 | Medium | 6.1 | 2021-10-29 | SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication. |
CVE-2021-30486 | High | 8.8 | 2021-07-22 | SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (POST group1), AssetM… |
CVE-2021-30049 | Medium | 6.1 | 2021-07-22 | SysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI. |
CVE-2020-13168 | Medium | 6.1 | 2020-10-02 | SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter. |
CVE-2020-10569 | Critical | 9.8 | 2020-04-21 | SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access t… |
CVE-2015-3001 | | | 2015-06-08 | SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypa… |
CVE-2015-3000 | | | 2015-06-08 | SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested entity references i… |
CVE-2015-2999 | | | 2015-06-08 | Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary SQL commands via the (1) groupFilter pa… |
CVE-2015-2998 | | | 2015-06-08 | SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstrated by de… |
CVE-2015-2997 | | | 2015-06-08 | SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as dem… |
CVE-2015-2996 | | | 2015-06-08 | Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the fileN… |
CVE-2015-2995 | | | 2015-06-08 | The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute arbitrary… |
CVE-2015-2994 | | | 2015-06-08 | Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a… |
CVE-2015-2993 | | | 2015-06-08 | SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via… |
CVE-2014-9436 | | | 2015-01-02 | Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\\\ (four backslashes) in the f… |