CVE-2015-3001: SysAid

Medium severity, CVSS 5.0. EPSS: 6.8% chance of exploitation in the next 30 days.

SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.

Affected products

• SysAid SysAid: up to and including 15.1

Published 2015-06-08. Last modified 2026-06-17.