Beveiligingsadvies

CVE-2025-2776

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-07 14:50:40
Laatst bijgewerkt 2025-11-19 18:33:05
Toegewezen door VulnCheck
CVSS-score 9.3
Status PUBLISHED

Beschrijving

SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.