---
title: "SysAid: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/sysaid/
description: "Every SysAid vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (3), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2025-07-22
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# SysAid: known exploited vulnerabilities

- 2025-07-22 [CVE-2025-2776](https://erroneo.us/security/cve/CVE-2025-2776/index.md) SysAid SysAid On-Prem: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability (due 2025-08-12; ransomware: Unknown)
- 2025-07-22 [CVE-2025-2775](https://erroneo.us/security/cve/CVE-2025-2775/index.md) SysAid SysAid On-Prem: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability (due 2025-08-12; ransomware: Unknown)
- 2023-11-13 [CVE-2023-47246](https://erroneo.us/security/cve/CVE-2023-47246/index.md) SysAid SysAid Server: SysAid Server Path Traversal Vulnerability (due 2023-12-04; ransomware: Known)

---
Source page: https://erroneo.us/security/vendor/sysaid/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt