Veille CVE

Semaine du 5 mai au 11 mai 2025

3 CVE

Critique 1 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2025-47729 4.9 Moyenne Exploitée

    TeleMessage archiving backend · Telemessage text message archiver

    The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.

  2. CVE-2025-2776 9.8 Critique Exploitée

    SysAid On-Prem · Sysaid sysaid

    SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.

  3. CVE-2025-2775 7.5 Élevée Exploitée

    SysAid On-Prem · Sysaid sysaid

    SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.