Description
SysAid On-Prem是以色列SysAid公司的一个本地化部署的IT服务管理(ITSM)平台。 SysAid On-Prem 23.3.40及之前版本存在安全漏洞，该漏洞源于Server URL处理功能中存在未经验证的XML外部实体漏洞，可能导致管理员账户接管和任意文件读取。
SysAid XXE 漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/
https://nvd.nist.gov/vuln/detail/CVE-2025-2775
https://www.sonicwall.com/blog/critical-sysaid-xxe-vulnerabilities-expose-systems-to-remote-exploitation-cve-2025-2775-2777-
https://documentation.sysaid.com/docs/24-40-60
https://www.ionix.io/blog/sysaid-on-prem-xml-external-entity-vulnerability-cve-2025-2775/
https://www.broadcom.com/support/security-center/protection-bulletin/cve-2025-2775-cve-2025-2776-sysaid-on-prem-xxe-vulnerabilities
https://thehackernews.com/2025/07/cisa-warns-sysaid-flaws-under-active.html
https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-sysaid-vulnerabilities-in-attacks/
https://www.tenablecloud.cn/plugins/nessus/235661
https://cn-sec.com/archives/4040699.html