CVE-2025-2775

Published May 7, 2025

Last updated a month ago

SysAid On-Prem

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-2775 is an unauthenticated XML External Entity (XXE) vulnerability found in SysAid On-Prem versions 23.3.40 and earlier. This vulnerability exists in the Checkin processing functionality. It could allow an attacker to interfere with the application's parsing of XML input. Successful exploitation of CVE-2025-2775 can lead to administrator account takeover and the ability to read files. This vulnerability, along with CVE-2025-2776 and CVE-2025-2777, can be exploited by sending specially crafted HTTP POST requests to specific endpoints. These vulnerabilities were patched in SysAid On-Prem version 24.4.60 b16.

Description: SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.
Source: disclosure@vulncheck.com
NVD status: Analyzed
Products: sysaid

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
Exploit added on: Jul 22, 2025
Exploit action due: Aug 12, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

disclosure@vulncheck.com: CWE-611

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:sysaid:sysaid:*:*:*:*:on-premises:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9F967FFC-8AE4-4215-B2F5-333870F75899",
            "versionEndIncluding": "23.3.40"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.