SysAid 20.4.74 - Cross-Site Scripting

披露于 2021/10/29 · 更新于 2025/07/29

CVSS 评分6.1/ 10.0

EPSS 概率41.3%百分位 97.2%

漏洞描述

SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via the KeepAlive.jsp stamp parameter.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 sysaid 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2025-2776RCE SysAid On-Prem <= 23.3.40 - XML External Entity sysaid	严重	9.3	12.7%	PoCEXP	2025/05/07
CVE-2025-2777RCE SysAid On-Prem <= 23.3.40 - XML External Entity sysaid	严重	9.3	12.7%	PoCEXP	2025/05/07
CVE-2025-2775 SysAid On-Prem <= 23.3.40 - XML External Entity sysaid	高危	9.3	14.6%	PoCEXP	2025/05/07
CVE-2023-47246KEV SysAid Server - Remote Code Execution sysaid	严重	9.8	94.4%	PoCEXP	2023/11/04
CVE-2021-30049 SysAid Technologies 20.3.64 b14 - Cross-Site Scripting sysaid	中危	6.1	10.6%	PoCEXP	2021/07/22
CVE-2015-2995RCE CVE-2015-2995 sysaid	中危	6.8	80.3%	PoCEXP	2015/06/08