CVE-2025-2775criticalunder attackCWE-611

CVE-2025-2775: critical vulnerability in SysAid On-Prem

SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection

Published · Updated

Follow this CVE+ Monitor SysAid On-Prem

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.3epss 43%
from disclosure to weaponsame day
Published on NVDMay 7
1st PoCMar 28
CISA KEV+76d
Action required by CISAfederal deadline: 2025-08-12

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

SysAid On-Prem up to version 23.3.40 has a critical flaw in how it processes check-in data that lets attackers read files and take over administrator accounts without needing to log in first.

Technical detail

An unauthenticated XXE vulnerability exists in the Checkin processing endpoint (CWE-611) that allows attackers to inject malicious XML entities to read arbitrary files or execute actions with administrator privileges. The attack requires no prior authentication and can lead to complete system compromise through admin account takeover.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Affected products
SysAid · SysAid On-Prem
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — SysAid On-Prem

In the same product, most dangerous first.

CVE-2025-2776CRITICALSysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity InjectionEPSS 65.2%KEVCVE-2025-2777CRITICALSysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity InjectionEPSS 72.9%