SysAid
Security incidents tagged SysAid. Newest first.
0 SysAid incidents in the last 12 months
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 457
- Longest quiet run: 616 days (Nov 14–Jul 21)
Show 2 older incidents2 older incidents
July 2025 1
CriticalSysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776)Patched
SysAid On-Prem Patched
CVE-2025-2775: SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives. CVE-2025-2776: SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives. Added to CISA KEV on 2025-07-22.
Open incident →CVE-2025-2775 · CVE-2025-2776
November 2023 1
CriticalSysAid Server: Path Traversal (CVE-2023-47246)Patched
SysAid Server Patched
SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution. Added to CISA KEV on 2023-11-13. CISA lists known use in ransomware campaigns.
Open incident →CVE-2023-47246
