组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 风险等级 | CVSS | EPSS | 利用情报 | 披露时间 | |
|---|---|---|---|---|---|---|
| SysAid On-Prem <= 23.3.40 - XML External Entity | 严重 | 9.3 | 12.7% | PoCEXP | ||
| SysAid On-Prem <= 23.3.40 - XML External Entity | 严重 | 9.3 | 12.7% | PoCEXP | ||
| SysAid On-Prem <= 23.3.40 - XML External Entity | 高危 | 9.3 | 14.6% | PoCEXP | ||
| SysAid Server - Remote Code Execution | 严重 | 9.8 | 94.4% | PoCEXP | ||
| SysAid 20.4.74 - Cross-Site Scripting | 中危 | 6.1 | 41.3% | PoCEXP | ||
| SysAid Technologies 20.3.64 b14 - Cross-Site Scripting | 中危 | 6.1 | 10.6% | PoCEXP | ||
| CVE-2015-2995 | 中危 | 6.8 | 80.3% | PoCEXP | ||
| CVE-2015-2994 | 中危 | 6.5 | 78.1% | PoCEXP | ||
| CVE-2015-2993 | 高危 | 7.5 | 77.0% | PoCEXP | ||
| SysAid Help Desk <15.2 - Local File Inclusion | 高危 | 8.5 | 91.9% | PoCEXP |