CVE-2024-36394

CRITICAL

9.1

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-06-06

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

📦

Sysaid

<= 23.3.38

SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw proces...

SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL ...

SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin pro...

SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')