CVE-2021-30486

8.8 highEPSS 1.0%

High (8.8) in sysaid sysaid. EPSS 1.0% chance of exploitation in the next 30 days.

SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (POST group1), AssetManagementList.jsp (GET computerID or group1), or AssetManagementSummary.jsp (GET group1).

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-07-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sysaid:sysaid

References

https://eh337.net/2021/04/10/sysaid-ii/
https://eh337.net/2021/04/10/sysaid-ii/

Check your stack JSON