SO
Product
Sysaid On-premises
On CISA KEVExploited in the wildRansomware-linked
4
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add Sysaid On-premises to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-47246 RansomwareIn wildKEV | 9.8 | Nov 10 | SysAid Server Path Traversal Vulnerability Affected: before 23.3.36 |
| CVE-2023-32225 | 7.2 | Jul 30 | Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified… Affected: before 23.2.14 |
| CVE-2023-32226 | 6.5 | Jul 30 | Sysaid - CWE-552: Files or Directories Accessible to External Parties - Authenticated users may exfiltrate files from the server via an unspecified method Affected: before 23.2.14 |
| CVE-2020-13168 | 6.1 | Oct 2 | SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter Affected: 5.0; 5.5.06; 5.6; 6.0.9; 6.5; 7.0; +31 more |
Showing 4