Brand
SysAid: actively exploited vulnerabilities
3 vulnerabilities in SysAid products (SysAid On-Prem) are in CISA’s catalog of exploited vulnerabilities. Last added: July 22, 2025.
-
0 vulnerabilities added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one SysAid category to your radar, or open its page.
- Monitoring, ITSM and asset management 3 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- SysAid On-Prem 3 vulnerabilities · Monitoring and ITSM
Name used by CISA: SysAid. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this SysAid list.
Rank 1SysAid On-Prem
CVE-2025-2776SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jul 22, 2025
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 2SysAid On-Prem
CVE-2023-47246Ransomware
SysAid Server Path Traversal Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 13, 2023
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 3SysAid On-Prem
CVE-2025-2775SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jul 22, 2025
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.