Sysaid Sysaid On-premises — known CVE vulnerabilities

Every CVE whose affected-product data names Sysaid Sysaid On-premises, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-32225 — CVSS 9.8 (critical): Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a…
• CVE-2023-32226 — CVSS 8.3 (high): Sysaid - CWE-552: Files or Directories Accessible to External Parties - Authenticated users may exfiltrate files from the server via an…
• CVE-2020-13168 — CVSS 6.1 (medium): SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter.