Security Digest
SysAid: known exploited vulnerabilities
3 SysAid CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2025-07-22 | CVE-2025-2776 | SysAid SysAid On-Prem SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 2025-08-12 |
| 2025-07-22 | CVE-2025-2775 | SysAid SysAid On-Prem SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 2025-08-12 |
| 2023-11-13 | CVE-2023-47246 | SysAid SysAid Server SysAid Server Path Traversal Vulnerability Ransomware | 2023-12-04 |