Description
（CVE-2025-2777）SysAid On-Prem未认证XML外部实体（XXE）漏洞允许管理员账户接管和文件读取
（CVE-2025-2777）SysAid On-Prem未认证XML外部实体（XXE）漏洞允许管理员账户接管和文件读取
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-2777
https://www.cve.org/CVERecord?id=CVE-2025-2777
https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/
https://www.rapid7.com/db/vulnerabilities/sysaid-help-desk-cve-2025-2777/
https://www.tenable.com/cve/CVE-2025-2777
https://www.sonicwall.com/blog/critical-sysaid-xxe-vulnerabilities-expose-systems-to-remote-exploitation-cve-2025-2775-2777-
https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain
https://thehackernews.com/2025/07/cisa-warns-sysaid-flaws-under-active.html