{"items":[{"id":"CVE-2025-2777","published":"2025-05-07T14:53:00.712Z","updated":"2026-02-26T18:28:50.535Z","title":"SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection","severity":"CRITICAL","score":9.3,"vendor":"SysAid","product":"SysAid On-Prem","kev":false,"epss":0.72852,"kevAdded":null},{"id":"CVE-2025-2776","published":"2025-05-07T14:50:40.717Z","updated":"2025-11-19T18:33:05.781Z","title":"SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection","severity":"CRITICAL","score":9.3,"vendor":"SysAid","product":"SysAid On-Prem","kev":true,"epss":0.64726,"kevAdded":"2025-07-22"},{"id":"CVE-2025-2775","published":"2025-05-07T14:43:23.817Z","updated":"2025-11-19T18:33:18.279Z","title":"SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection","severity":"CRITICAL","score":9.3,"vendor":"SysAid","product":"SysAid On-Prem","kev":true,"epss":0.42612,"kevAdded":"2025-07-22"},{"id":"CVE-2024-36394","published":"2024-06-06T08:20:04.781Z","updated":"2024-08-02T03:37:05.138Z","title":"SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","severity":"CRITICAL","score":9.1,"vendor":"Sysaid","product":"SysAid","kev":false,"epss":0.01101,"kevAdded":null},{"id":"CVE-2024-36393","published":"2024-06-06T08:18:52.667Z","updated":"2024-08-02T03:37:04.931Z","title":"SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","severity":"CRITICAL","score":9.9,"vendor":"Sysaid","product":"SysAid","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2024-27775","published":"2024-03-28T12:19:53.385Z","updated":"2024-08-02T00:41:54.967Z","title":"SysAid - CWE-918: Server-Side Request Forgery (SSRF)","severity":"HIGH","score":7.2,"vendor":"SysAid","product":"SysAid","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2023-32226","published":"2023-07-30T07:53:21.574Z","updated":"2024-10-11T14:07:55.756Z","title":"Sysaid -  CWE-552: Files or Directories Accessible to External Parties","severity":"HIGH","score":8.3,"vendor":"Sysaid","product":"Sysaid","kev":false,"epss":0.00535,"kevAdded":null},{"id":"CVE-2023-32225","published":"2023-07-30T07:16:24.730Z","updated":"2024-10-21T17:53:17.063Z","title":"Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type","severity":"CRITICAL","score":9.8,"vendor":"Sysaid","product":"Sysaid","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2022-23170","published":"2022-06-24T15:00:10.798Z","updated":"2024-09-16T19:24:37.500Z","title":"SysAid - Okta SSO integration","severity":"MEDIUM","score":5.9,"vendor":"Sysaid","product":"SysAid - Okta SSO integration","kev":false,"epss":0.00659,"kevAdded":null},{"id":"CVE-2022-23166","published":"2022-05-12T19:49:52.719Z","updated":"2024-09-16T22:24:47.336Z","title":"Sysaid –  Sysaid Local File Inclusion (LFI)","severity":"MEDIUM","score":6.1,"vendor":"SysAid","product":"Sysaid","kev":false,"epss":0.0114,"kevAdded":null},{"id":"CVE-2022-23165","published":"2022-05-12T19:49:18.469Z","updated":"2024-09-16T17:59:45.128Z","title":"Sysaid –  Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS)","severity":"MEDIUM","score":5.5,"vendor":"SysAid","product":"Sysaid","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2022-22798","published":"2022-05-12T19:48:42.372Z","updated":"2024-09-17T02:47:50.302Z","title":"Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control","severity":"MEDIUM","score":6.8,"vendor":"SysAid","product":"Sysaid","kev":false,"epss":0.00625,"kevAdded":null},{"id":"CVE-2022-22797","published":"2022-05-12T19:48:08.939Z","updated":"2024-09-16T19:51:58.210Z","title":"Sysaid – sysaid Open Redirect","severity":"MEDIUM","score":4.6,"vendor":"SysAid","product":"Sysaid","kev":false,"epss":0.00508,"kevAdded":null},{"id":"CVE-2022-22796","published":"2022-05-12T19:47:32.643Z","updated":"2024-09-17T02:27:31.416Z","title":"Sysaid – Sysaid System Takeover","severity":"HIGH","score":7,"vendor":"SysAid","product":"Sysaid","kev":false,"epss":0.01416,"kevAdded":null},{"id":"CVE-2021-36721","published":"2021-12-14T13:59:43.283Z","updated":"2024-09-16T16:33:07.338Z","title":"Sysaid - Sysaid API User Enumeration","severity":"MEDIUM","score":4.4,"vendor":"SysAid","product":"SysAid API","kev":false,"epss":0.00459,"kevAdded":null}]}