Skip to content
English

Products › Brands

Brand

SysAid: actively exploited vulnerabilities

3 vulnerabilities in SysAid products (SysAid On-Prem) are in CISA’s catalog of exploited vulnerabilities. Last added: July 22, 2025.

By category

Add just one SysAid category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • SysAid On-Prem 3 vulnerabilities · Monitoring and ITSM

Name used by CISA: SysAid. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this SysAid list.

  1. Rank 1SysAid On-Prem

    CVE-2025-2776

    SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 22, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)
  2. Rank 2SysAid On-Prem

    CVE-2023-47246

    Ransomware

    SysAid Server Path Traversal Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 13, 2023
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)
  3. Rank 3SysAid On-Prem

    CVE-2025-2775

    SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 22, 2025
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.