Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-2777 1 Sysaid 2 Sysaid, Sysaid On-premises 2026-02-26 9.3 Critical
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing functionality, allowing for administrator account takeover and file read primitives.
CVE-2025-2775 1 Sysaid 2 Sysaid, Sysaid On-premises 2025-11-19 9.3 Critical
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.
CVE-2025-2776 1 Sysaid 2 Sysaid, Sysaid On-premises 2025-11-19 9.3 Critical
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.