Veille CVE

Semaine du 5 mai au 11 mai 2025

1 CVE sur 4

  1. CVE-2025-2776 9.8 Critique Exploitée

    SysAid On-Prem · Sysaid sysaid

    SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.