← All advisories

Critical severity9.1NVD Advisory· Published Jun 6, 2024· Updated Jun 17, 2026

CVE-2024-36394

CVE-2024-36394

Description

SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

3

Sysaid/Sysaid3 versions
cpe:2.3:a:sysaid:sysaid:*:*:*:*:on-premises:*:*:*+ 2 more
- cpe:2.3:a:sysaid:sysaid:*:*:*:*:on-premises:*:*:*range: <=23.3.38
- (no CPE)
- (no CPE)range: All versions

Patches

Vulnerability mechanics

References

1

www.gov.il/en/Departments/faq/cve_advisoriesnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.