CVE-2025-2775

high

Description

SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.

References

https://documentation.sysaid.com/docs/24-40-60

https://horizon3.ai/attack-research/attack-blogs/ticket-to-shell-exploiting-php-filters-and-cnext-in-osticket-cve-2026-22200/

https://securityaffairs.com/180293/hacking/u-s-cisa-adds-crushftp-google-chromium-and-sysaid-flaws-to-its-known-exploited-vulnerabilities-catalog.html

https://www.securityweek.com/cisa-warns-of-sysaid-vulnerability-exploitation/

https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-sysaid-vulnerabilities-in-attacks/

https://www.cisa.gov/news-events/alerts/2025/07/22/cisa-adds-four-known-exploited-vulnerabilities-catalog

https://thehackernews.com/2025/07/cisa-warns-sysaid-flaws-under-active.html

https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2775

Details

Source: Mitre, NVD

Published: 2025-05-07

Updated: 2025-10-27

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N