<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: sysaid-on-prem</title><description>Every new CVE for sysaid-on-prem.</description><link>https://agentprime.io/</link><item><title>CVE-2025-2777: SysAid On-Prem &lt;= 23.3.40 lshw Proceessing XML External Entity Injection</title><link>https://agentprime.io/advisories/CVE-2025-2777/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2777/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. CVSS score 9.3 (7.0 or more) and EPSS 0.73 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 May 2025 14:53:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-2776: SysAid On-Prem &lt;= 23.3.40 serverurl Proceessing XML External Entity Injection</title><link>https://agentprime.io/advisories/CVE-2025-2776/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2776/</guid><description>CVSS 9.3 (Critical). Critical: In CISA’s KEV catalogue since 22 Jul 2025: it is known to be exploited. CVSS score 9.3: 9.0 or more. CVSS score 9.3 (7.0 or more) and EPSS 0.65 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 May 2025 14:50:40 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2025-2775: SysAid On-Prem &lt;= 23.3.40 Checkin Proceessing XML External Entity Injection</title><link>https://agentprime.io/advisories/CVE-2025-2775/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2775/</guid><description>CVSS 9.3 (Critical). Critical: In CISA’s KEV catalogue since 22 Jul 2025: it is known to be exploited. CVSS score 9.3: 9.0 or more. CVSS score 9.3 (7.0 or more) and EPSS 0.43 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 May 2025 14:43:23 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item></channel></rss>