PULSE
EN
FEED
ransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilitiesransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilities
← Todos los CVEs
CVE Watch—

CVE-2025-2775

SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

CVSS

—

Sin CVSS

EPSS

42.6%

p99

KEV

SÍ

22 jul 2025

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d
42.6%EPSS · 30 días43.0%
2026-09-172026-10-15
Ficha del catálogo KEV

Producto

SysAid / SysAid On-Prem

Vulnerabilidad

SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

Añadido a KEV

22 jul 2025

Remediar antes de

12 ago 2025

Uso conocido en ransomware

No

Descripción resumida

SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://documentation.sysaid.com/docs/24-40-60 ; https://nvd.nist.gov/vuln/detail/CVE-2025-2775

CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-2776—
99.2%
KEV—80SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability—