CVE-2024-36394

Description

References

• gov.il/en/Departments/faq/cve_advisories · Third Party Advisory

Altre vulnerabilità di sysaid

• CVE-2025-2777CRITICO 9.8SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing funct…
• CVE-2025-2776CRITICO 9.8EXPLOITED (CISA KEV)SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing…
• CVE-2025-2775ALTO 7.5EXPLOITED (CISA KEV)SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing fu…
• CVE-2024-36393CRITICO 9.8SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
• CVE-2023-47247MEDIO 4.3In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102.