SysAid · SysAid Server
CVE-2023-47246
SysAid Server Path Traversal Vulnerability
Exploited in attacks
Used by ransomware
Critical 9.8 Attack chance: 99%
What it is
In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.
CISA: SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Deadline for US federal agencies: December 4, 2023
More exploited flaws from SysAid
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jul 22, 2025 | On-Prem Improper Restriction of XML External Entity Reference | SysAid On-Prem | Critical 9.3 | 43% |
| Jul 22, 2025 | On-Prem Improper Restriction of XML External Entity Reference | SysAid On-Prem | Critical 9.3 | 65% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.