CVE-2024-36393

Description

References

• gov.il/en/Departments/faq/cve_advisories · Third Party Advisory

Weitere Schwachstellen in sysaid

• CVE-2025-2777KRITISCH 9.8SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing funct…
• CVE-2025-2776KRITISCH 9.8EXPLOITED (CISA KEV)SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing…
• CVE-2025-2775HOCH 7.5EXPLOITED (CISA KEV)SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing fu…
• CVE-2024-36394KRITISCH 9.8SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
• CVE-2023-47247MITTEL 4.3In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102.