Skip to content
OpenAdvisories

Vendor

SysAid

15 known vulnerabilities.

Products

SysAid 10 SysAid On-Prem 3 SysAid API 1 SysAid - Okta SSO integration 1 On-Prem 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2024-27775

    SysAid - CWE-918: Server-Side Request Forgery (SSRF)

    SysAid before version 23.2.14 b18 - CWE-918: Server-Side Request Forgery (SSRF) may allow exposing the local OS user's NTLMv2 hash

    SysAid SysAid
  • High 8.3
    CVE-2023-32226

    Sysaid - CWE-552: Files or Directories Accessible to External Parties

    Sysaid - CWE-552: Files or Directories Accessible to External Parties -  Authenticated users may exfiltrate files from the server via an unspecified method.

    SysAid SysAid
  • High 7.0
    CVE-2022-22796

    Sysaid – Sysaid System Takeover

    Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button, and it will redirect you to /home.jsp without any authentication.

    SysAid SysAid