CVE-2025-55077CWE-250CWE-668CWE-863

Tyler Technologies ERP Pro 9 SaaS application escape

Medium · published August 7, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environment with the privileges of the authenticated user. Tyler Technologies deployed hardened remote Windows environment settings to all ERP Pro 9 SaaS customer environments as of 2025-08-01.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
EPSS
0.00216 · 11.5th percentile
Weaknesses
CWE-250 · Execution with Unnecessary Privileges; CWE-668 · Exposure of Resource to Wrong Sphere; CWE-863 · Incorrect Authorization
Published
2025-08-07T18:37Z
EPSS history
Timeline
  • 07 AUG 18:37Z
    Tyler Technologies ERP Pro 9 SaaS application escape
    cvelistv5