CVE-2025-2776

Description

SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.

References

• Advisories
• Exploits

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS