PT-2025-32306 · Microsoft+1 · Windows+1

Shawn Plowman · Published 2025-08-07 · Updated 2025-08-07 · CVE-2025-55077

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Tyler Technologies ERP Pro 9 SaaS (affected versions not specified)

Description The software allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environment with the privileges of the authenticated user. Tyler Technologies deployed hardened remote Windows environment settings to all customer environments as of 2025-08-01.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Authorization

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-863

CWE-250

CWE-668

Related Identifiers

CVE-2025-55077

Affected Products

Erp-Pro

Windows

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-55077 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-55077 · Security Note
• https://osv.dev/vulnerability/CVE-2025-55077 · Vendor Advisory
• https://t.me/CVEtracker/29457 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1953577784187531384 · Twitter Post
• https://twitter.com/CVEnew/status/1953536212054290550 · Twitter Post
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-219-01.json · Note