Vendor

    SysAid

    41 known vulnerabilities in products by SysAid, 3 of them actively exploited (CISA KEV).

    Key figures

    41

    Vulnerabilities

    3

    Actively exploited (KEV)

    1

    Used by ransomware

    11

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in SysAid
    CriticalCVE-2023-47246

    SysAid Server Path Traversal Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2025-2776

    SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection

    In CISA KEV

    		9.3
    CriticalCVE-2025-2775

    SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection

    In CISA KEV

    		9.3
    CriticalCVE-2025-2777

    SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection

    		9.3
    CriticalCVE-2020-10569

    SysAid On-premise: security vulnerability

    		9.8
    MediumCVE-2021-31862

    Sysaid: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2021-43971

    Sysaid: SQL Injection

    		8.8
    HighCVE-2021-43973

    Sysaid: Unrestricted File Upload

    		8.8
    MediumCVE-2021-30049

    Sysaid: Cross-Site Scripting (XSS)

    		6.1
    CriticalCVE-2024-36394

    SysAid: OS Command Injection

    		9.1
    Not ratedCVE-2015-2996

    Sysaid: Path Traversal

    		—
    Not ratedCVE-2015-2997

    Sysaid: Path Traversal

    		—
    Not ratedCVE-2015-2993

    Sysaid: security vulnerability

    		—
    CriticalCVE-2022-22796

    Sysaid – Sysaid System Takeover

    		7.0
    Not ratedCVE-2015-2994

    Sysaid: Unrestricted File Upload

    		—
    Not ratedCVE-2015-2995

    Sysaid: security vulnerability

    		—
    MediumCVE-2021-43972

    Sysaid: security vulnerability

    		6.5
    Not ratedCVE-2015-2998

    Sysaid: Information Disclosure

    		—
    HighCVE-2021-30486

    Sysaid: SQL Injection

    		8.8
    CriticalCVE-2023-32225

    Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type

    		9.8
    Not ratedCVE-2015-3000

    Sysaid: Denial of Service

    		—
    Not ratedCVE-2014-9436

    Sysaid: Path Traversal

    		—
    Not ratedCVE-2015-3001

    Sysaid: Hard-coded Credentials

    		—
    MediumCVE-2021-43974

    SysAid Itil: security vulnerability

    		5.3
    CriticalCVE-2022-23166

    Sysaid – Sysaid Local File Inclusion (LFI)

    		6.1

    All vulnerabilities in search

    Products

    Products by SysAid
    Sysaid323
    Help Desk40
    Sysaid30
    Sysaid On-prem32