Aggregates CVE and security vulnerability intelligence across all sysaid-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk path handling, vendor risk sql injection, and vendor risk xxe and related problems; some flaws may lead to vendor impact session compromise and vendor impact file overwrite.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2021-43974 | An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to disable anonymous user registration only hides the client-side registration form. An attacker can still post registration data to create new accounts without prior authentication. | [email protected] | 5.3 | 1.42% | 2022-01-11 | 2026-06-17 |
| CVE-2021-43973 | An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload an arbitrary file via the file parameter in the HTTP POST body. A successful request returns the absolute, server-side filesystem path of the uploaded file. | [email protected] | 8.8 | 1.71% | 2022-01-11 | 2026-06-17 |
| CVE-2021-43972 | An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root (with an arbitrary filename) via the tempFile and fileName parameters in the HTTP POST body. | [email protected] | 6.5 | 1.47% | 2022-01-11 | 2026-06-17 |
| CVE-2021-43971 | A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText parameter. | [email protected] | 8.8 | 1.74% | 2022-01-11 | 2026-06-17 |
| CVE-2021-36721 | Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server. | [email protected] | 4.4 | 0.44% | 2021-12-14 | 2026-06-16 |
| CVE-2021-31862 | SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication. | [email protected] | 6.1 | 3.92% | 2021-10-29 | 2026-06-16 |
| CVE-2021-30486 | SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (POST group1), AssetManagementList.jsp (GET computerID or group1), or AssetManagementSummary.jsp (GET group1). | [email protected] | 8.8 | 1.02% | 2021-07-22 | 2026-06-16 |
| CVE-2021-30049 | SysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI. | [email protected] | 6.1 | 2.47% | 2021-07-22 | 2026-06-16 |
| CVE-2020-13168 | SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter. | [email protected] | 6.1 | 0.95% | 2020-10-02 | 2026-06-16 |
| CVE-2020-10569 | SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. NOTE: This may be a duplicate of CVE-2020-1938 | [email protected] | 9.8 | 3.18% | 2020-04-21 | 2026-06-16 |
| CVE-2015-3001 | SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password. | [email protected] | 5.0 | 6.82% | 2015-06-08 | 2026-06-16 |
| CVE-2015-3000 | SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested entity references in an XML document to (1) /agententry, (2) /rdsmonitoringresponse, or (3) /androidactions, aka an XML Entity Expansion (XEE) attack. | [email protected] | 7.8 | 8.03% | 2015-06-08 | 2026-06-16 |
| CVE-2015-2999 | Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary SQL commands via the (1) groupFilter parameter in an AssetDetails report to /genericreport, customSQL parameter in a (2) TopAdministratorsByAverageTimer report or an (3) ActiveRequests report to /genericreport, (4) dir parameter to HelpDesk.jsp, or (5) grantSQL parameter to RFCGantt.jsp. | [email protected] | 6.5 | 1.81% | 2015-06-08 | 2026-06-16 |
| CVE-2015-2998 | SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstrated by decrypting the database password in WEB-INF/conf/serverConf.xml. | [email protected] | 5.0 | 26.35% | 2015-06-08 | 2026-06-16 |
| CVE-2015-2997 | SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large directory traversal sequence, which reveals the installation path in an error message. | [email protected] | 5.0 | 57.20% | 2015-06-08 | 2026-06-16 |
| CVE-2015-2996 | Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the fileName parameter to getGfiUpgradeFile or (2) cause a denial of service (CPU and memory consumption) via a .. (dot dot) in the fileName parameter to calculateRdsFileChecksum. | [email protected] | 8.5 | 86.64% | 2015-06-08 | 2026-06-16 |
| CVE-2015-2995 | The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute arbitrary files via a NULL byte after the extension, as demonstrated by a .war%00 file. | [email protected] | 6.8 | 33.79% | 2015-06-08 | 2026-06-16 |
| CVE-2015-2994 | Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp extension, then accessing it via a direct request to the file in icons/user_photo/. | [email protected] | 6.5 | 49.79% | 2015-06-08 | 2026-06-16 |
| CVE-2015-2993 | SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry. | [email protected] | 7.5 | 55.36% | 2015-06-08 | 2026-06-16 |
| CVE-2014-9436 | Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\\\ (four backslashes) in the fileName parameter to getRdsLogFile. | [email protected] | 5.0 | 6.90% | 2015-01-02 | 2026-06-16 |