Approved changes feed: RSS · Atom
cpe:2.3:a:sysaid:sysaid:*:*:*:*:on-premises:*:*:*
part: a version: * update: *
| Vendor | Sysaid (becec6d9-22df-5777-a1b0-a5b1c5466ab6) |
|---|---|
| Product | Sysaid (3bbe567a-2790-5c11-ad33-b3b92507d6e3) |
| Edition | * |
| Language | * |
| Software edition | on-premises |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2777 |
vulnerable | 2026-06-08 07:16:58.231247 |
SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection
CRITICAL (9.3)
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing functionality, allowing for administrator account takeover and file read primitives.
Published: 2025-05-07T14:53:00.712Z
Updated: 2026-02-26T18:28:50.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2776 |
vulnerable | 2026-06-08 07:16:58.230587 |
SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection
CRITICAL (9.3)
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.
Published: 2025-05-07T14:50:40.717Z
Updated: 2025-11-19T18:33:05.781Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2775 |
vulnerable | 2026-06-08 07:16:58.225583 |
SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
CRITICAL (9.3)
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.
Published: 2025-05-07T14:43:23.817Z
Updated: 2025-11-19T18:33:18.279Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36394 |
vulnerable | 2026-06-08 06:39:44.617349 |
SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CRITICAL (9.1)
SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published: 2024-06-06T08:20:04.781Z
Updated: 2024-08-02T03:37:05.138Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36393 |
vulnerable | 2026-06-08 06:39:44.616514 |
SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CRITICAL (9.9)
SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2024-06-06T08:18:52.667Z
Updated: 2024-08-02T03:37:04.931Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47247 |
vulnerable | 2026-06-08 06:14:24.539438 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47246 |
vulnerable | 2026-06-08 06:14:24.538894 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33706 |
vulnerable | 2026-06-08 06:06:23.373901 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23166 |
vulnerable | 2026-06-08 05:40:56.521288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23165 |
vulnerable | 2026-06-08 05:40:56.520639 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22798 |
vulnerable | 2026-06-08 05:40:55.378931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22797 |
vulnerable | 2026-06-08 05:40:55.378401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22796 |
vulnerable | 2026-06-08 05:40:55.377842 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.