SysAid known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 3 SysAid vulnerabilities: 0 added in the last 365 days, 3 rated critical (CVSS 9 or higher), and 1 with known ransomware use. The most recent was added Jul 22, 2025.
RSS feed for SysAid exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2025-07-22 | CVE-2025-2775 | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 9.3 (v3.1) | 42.6% | 2025-08-12 | Unknown |
| 2025-07-22 | CVE-2025-2776 | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 9.3 (v3.1) | 64.7% | 2025-08-12 | Unknown |
| 2023-11-13 | CVE-2023-47246 | SysAid Server Path Traversal Vulnerability | 9.8 (v3.1) | 98.9% | 2023-12-04 | Known |