Sysaid

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. Sysaid – Sysaid System TakeoverCVE-2022-22796SysAid · CVSS 7 · 1.4% likely

   CWE-287

2. Sysaid – Sysaid Local File Inclusion (LFI)CVE-2022-23166SysAid · CVSS 6.1 · 1.1% likely

   CWE-22

3. SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CVE-2024-36394Sysaid · CVSS 9.1 · 1.1% likely

   CWE-78

4. Sysaid - CWE-434: Unrestricted Upload of File with Dangerous TypeCVE-2023-32225Sysaid · CVSS 9.8 · 0.6% likely

   CWE-434

5. Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access ControlCVE-2022-22798SysAid · CVSS 6.8 · 0.6% likely
6. SysAid - CWE-918: Server-Side Request Forgery (SSRF)CVE-2024-27775SysAid · CVSS 7.2 · 0.6% likely

   CWE-918

7. SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to…CVE-2023-33706Sysaid · 0.6% likely

   CWE-639

8. Sysaid - CWE-552: Files or Directories Accessible to External PartiesCVE-2023-32226Sysaid · CVSS 8.3 · 0.5% likely

   CWE-552

9. Sysaid – sysaid Open RedirectCVE-2022-22797SysAid · CVSS 4.6 · 0.5% likely

   CWE-601

10. SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2024-36393Sysaid · CVSS 9.9 · 0.4% likely

    CWE-89

11. Sysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS)CVE-2022-23165SysAid · CVSS 5.5 · 0.4% likely

    CWE-79

12. In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102.CVE-2023-47247Sysaid · 0.3% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.