CVE-2025-2775
CRITICAL
Published 2025-05-07T14:43:23.817Z
Actions:
CVSS Score
V3.1
9.3
/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Base Score Metrics
Exploitability: N/A
Impact: N/A
Attack Vector Metrics
Impact Metrics
Description
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.
Available Exploits
No exploits available for this CVE.
Related News
No news articles found for this CVE.
Affected Products
Affected Versions:
References
Published: 2025-05-07T14:43:23.817Z
Last Modified: 2025-05-08T03:56:07.628Z
Copied to clipboard!