Yüksek CISA KEV
CVE-2025-2775: SysAid SysAid On-Prem: aktif olarak istismar edilen açık
Açıklama (NVD)
SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.
Özet bilgiler
- EPSS
- %42,61 (yüzdelik 99)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2025-07-22 · Son tarih: 2025-08-12
Gerekli aksiyon: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.