CVE-2025-2777
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing functionality, allowing for administrator account takeover and file read primitives.
Vendor
Product
CWE
Yayın Tarihi
2025-05-07 15:15:57
Güncelleme
2025-06-27 14:35:46
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-