Threat intelligence / Vulnerability
CVE-2025-2776
SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.
Vulnerability
TypeVulnerability
External ID—
First seen2025-07-22
Last seen2025-07-22
Confidence
—
SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.
Labels
CISA KEV context
Vendor / productSysAid SysAid On-Prem
Added2025-07-22
Due date2025-08-12
2 recorded
Relationships
2 external