Sysaid Sysaid On-Premises
3 CVEs affecting Sysaid Sysaid On-Premises. Latest disclosed: 2023-07-30. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32225 | Critical | 9.8 | 2023-07-30 | Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filety… |
CVE-2023-32226 | High | 8.3 | 2023-07-30 | Sysaid - CWE-552: Files or Directories Accessible to External Parties - Authenticated users may exfiltrate files from the server via an unspecified method… |
CVE-2020-13168 | Medium | 6.1 | 2020-10-02 | SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter. |