CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.3. Its EPSS score suggests a 72.3% probability of exploitation in the next 30 days.
CVE
CVE-2025-2777
Severity
CRITICAL
CVSS
9.3
EPSS
72.27%
Original NVD Description
SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing functionality, allowing for administrator account takeover and file read primitives.
Related CVEs
Other vulnerabilities affecting the same vendor(s)