Exploited vulnerabilities

SysAid

3 SysAid vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue3
Last 12 months0
In ransomware campaigns1
Last addition22 July 2025

The vulnerabilities3

  1. 22 July 2025CVE-2025-2776SysAid On-PremSysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
  2. 22 July 2025CVE-2025-2775SysAid On-PremSysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
  3. 13 November 2023CVE-2023-47246SysAid ServerSysAid Server Path Traversal VulnerabilityRansomware

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, SysAid included.

All vendorsThe catalogue on the CISA website