Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

SysAid

Products: SysAid On-Prem

81.1

Score

3

CVEs

2

Active

1

PoC

2

KEV

#34

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-2775	2025-05-07	9.3v3.1	ACTIVE		Low	None	YES	40.6	SysAid On-Prem	SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.
CVE-2025-2776	2025-05-07	9.3v3.1	ACTIVE		Low	None	YES	40.6	SysAid On-Prem	SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.
CVE-2025-2777	2025-05-07	9.3v3.1	POC	—	Low	None	YES	0.0	SysAid On-Prem	SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing functionality, allowing for administrator account takeover and file read primitives.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3