Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2025-2775 — SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.
|
SysAid | SysAid On-Prem | Jul 22, 2025 | Aug 12, 2025 | |
|
CVE-2025-2776 — SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.
|
SysAid | SysAid On-Prem | Jul 22, 2025 | Aug 12, 2025 | |
|
CVE-2023-47246 — SysAid Server Path Traversal Vulnerability
SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution.
|
SysAid | SysAid Server | Nov 13, 2023 | Dec 4, 2023 | Ransomware |
SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.
SysAid On-Prem · Jul 22, 2025
SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.
SysAid On-Prem · Jul 22, 2025
SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution.
SysAid Server · Nov 13, 2023