CVE-2022-22796: SysAid

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button, and it will redirect you to /home.jsp without any authentication.

Affected products

• SysAid SysAid: before 21.1.30 (fixed in 21.1.30); before 21.4.45 (fixed in 21.4.45)

Published 2022-05-12. Last modified 2026-06-17.