Vulnerabilidades de Sysaid
CVEs publicadas que afetam produtos de Sysaid: 3 registro(s), com severidade, exploração e correções.
CVE-2025-2776
Crítica · 9.8
KEV Urgente · 73 Exploit público CWE-611 07/05/2025
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.
CVE-2025-2775
Alta · 7.5
KEV Alta · 69 Exploit público CWE-611 07/05/2025
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.
CVE-2023-47246
Crítica · 9.8
KEV Urgente · 83 Exploit público Ransomware CWE-22 10/11/2023
SysAid Server Path Traversal Vulnerability
In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.