CVE Tools
Track your stack

Sysaid

22 CVEs tracked since 2015. Since Jun 2015, none of them reached CISA KEV.

Sysaid CVEs per month

Jun 2015 to Sep 2022. Point at a month, or focus the strip and use the arrow keys.
Sysaid CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2015-0690
2015-07null or fewer
2015-08null or fewer
2015-09null or fewer
2015-10null or fewer
2015-11null or fewer
2015-12null or fewer
2016-01null or fewer
2016-02null or fewer
2016-03null or fewer
2016-04null or fewer
2016-05null or fewer
2016-06null or fewer
2016-07null or fewer
2016-08null or fewer
2016-09null or fewer
2016-10null or fewer
2016-11null or fewer
2016-12null or fewer
2017-01null or fewer
2017-02null or fewer
2017-03null or fewer
2017-04null or fewer
2017-05null or fewer
2017-06null or fewer
2017-07null or fewer
2017-08null or fewer
2017-09null or fewer
2017-10null or fewer
2017-11null or fewer
2017-12null or fewer
2018-01null or fewer
2018-02null or fewer
2018-03null or fewer
2018-04null or fewer
2018-05null or fewer
2018-06null or fewer
2018-07null or fewer
2018-08null or fewer
2018-09null or fewer
2018-10null or fewer
2018-11null or fewer
2018-12null or fewer
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-07null or fewer
2019-08null or fewer
2019-09null or fewer
2019-10null or fewer
2019-11null or fewer
2019-12null or fewer
2020-01null or fewer
2020-02null or fewer
2020-03null or fewer
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-02null or fewer
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-06null or fewer
2021-07null or fewer
2021-08null or fewer
2021-09null or fewer
2021-10null or fewer
2021-11null or fewer
2021-12null or fewer
2022-0140
2022-02null or fewer
2022-03null or fewer
2022-04null or fewer
2022-0550
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-0940

Products

The products that kept showing up in Sysaid's monthly top three, with their CVEs summed over those months.

  1. Sysaid173 months
  2. Help Desk41 month
  3. Itil11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Sysaid.

  1. CVE-2025-2777SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection9.3
  2. CVE-2025-2776SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection9.3
  3. CVE-2025-2775SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection9.3
  4. CVE-2024-36394SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')9.1
  5. CVE-2024-36393SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')9.9
  6. CVE-2023-47426Уязвимость программного обеспечения автоматизации службы поддержки и контроля аппаратного и программного обеспечения SysAid, позволяющая нарушителю выполнить произвольный код9.8
  7. CVE-2024-27775SysAid - CWE-918: Server-Side Request Forgery (SSRF)7.2
  8. CVE-2023-47247In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102.4.3
  9. CVE-2023-33706SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to ShowMessage.jsp.6.5
  10. CVE-2023-47246In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.9.8
  11. CVE-2023-32226 Sysaid - CWE-552: Files or Directories Accessible to External Parties8.3
  12. CVE-2023-32225 Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type9.8
  13. CVE-2022-40325SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.6.1
  14. CVE-2022-40324SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.6.1
  15. CVE-2022-40323SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.6.1

The record

Peak rank
#19 in Jun 2015
Busiest month shown
Jun 2015, 9 CVEs
Months with a KEV entry
0 since Jun 2015
Monthly snapshots
4 since 2015
Sysaid's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store