Vulnerabilidades do SysAid SysAid On-Prem
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SysAid SysAid On-Prem: 2 registro(s), com versões afetadas e correções.
CVE-2025-2776
Crítica · 9.8
KEV Urgente · 73 Exploit público CWE-611 07/05/2025
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.
CVE-2025-2775
Alta · 7.5
KEV Alta · 69 Exploit público CWE-611 07/05/2025
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.