CVE-2021-36721: SysAid Application Programming Interface

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server.

Affected products

• SysAid Application Programming Interface: before 21.3.60 (fixed in 21.3.60)

Published 2021-12-14. Last modified 2026-06-17.