Sysaid On-premises vulnerabilities

2 known vulnerabilities in Sysaid On-premises from SysAid. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  SysAid Server Path Traversal Exploited

  CVE-2023-47246Nov 10, 2023SysAidEPSS 98.9%

  In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.

• 7.2 High severity

  Sysaid: Unrestricted Upload of File with Dangerous Type

  CVE-2023-32225Jul 30, 2023SysAid

  Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method.