{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T20:45:43.249Z",
  "tag": {
    "id": "sysaid",
    "label": "SysAid",
    "isStack": false,
    "url": "https://pwn.watch/t/sysaid",
    "feed": "https://pwn.watch/t/sysaid/feed.xml"
  },
  "counts": {
    "incidents": 2,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 2
  },
  "incidents": [
    {
      "slug": "sysaid-on-prem-cve-2025-2775",
      "title": "SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776)",
      "url": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775",
      "json": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "SysAid On-Prem",
      "tags": [
        "sysaid",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-2775",
        "CVE-2025-2776"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-07-22",
      "closedAt": "2025-07-22",
      "updatedAt": "2025-07-22",
      "summary": "CVE-2025-2775: SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives. CVE-2025-2776: SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives. Added to CISA KEV on 2025-07-22.",
      "xPost": null
    },
    {
      "slug": "sysaid-server-cve-2023-47246",
      "title": "SysAid Server: Path Traversal (CVE-2023-47246)",
      "url": "https://pwn.watch/i/sysaid-server-cve-2023-47246",
      "json": "https://pwn.watch/i/sysaid-server-cve-2023-47246.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "SysAid Server",
      "tags": [
        "sysaid",
        "ransomware",
        "cisa-kev",
        "path-traversal"
      ],
      "cveIds": [
        "CVE-2023-47246"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-11-13",
      "closedAt": "2023-11-13",
      "updatedAt": "2023-11-13",
      "summary": "SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution. Added to CISA KEV on 2023-11-13. CISA lists known use in ransomware campaigns.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "sysaid-on-prem-cve-2025-2775",
      "incidentTitle": "SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-22",
      "title": "CISA added CVE-2025-2775 to the KEV catalog (due 2025-08-12).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775"
    },
    {
      "incident": "sysaid-on-prem-cve-2025-2775",
      "incidentTitle": "SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-22",
      "title": "CISA added CVE-2025-2776 to the KEV catalog (due 2025-08-12).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775"
    },
    {
      "incident": "sysaid-server-cve-2023-47246",
      "incidentTitle": "SysAid Server: Path Traversal (CVE-2023-47246)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-11-13",
      "title": "CISA added CVE-2023-47246 to the KEV catalog (due 2023-12-04).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/sysaid-server-cve-2023-47246"
    }
  ]
}