VDB
CVE-2025-49493
CVE-2025-49493
PUBLISHED
KEV
CVSS 5.800000190734863 MEDIUM
Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.
EPSS 3.40% · 88.1th percentile
Risk Scores
CVSS 3.1
5.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
EPSS Score
3.40%
88.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Akamai | CloudTest | 0 |
| akamai | cloudtest | 0 |
Timeline
- CVE Published
- Jan 21, 1970 CrowdSec Sighting
- Jun 10, 2021 CrowdSec Sighting
- Oct 21, 2021 CrowdSec Sighting
- Feb 27, 2022 CrowdSec Sighting
- Mar 18, 2022 CrowdSec Sighting
- May 31, 2022 CrowdSec Sighting
- Jun 23, 2022 CrowdSec Sighting
- Aug 2, 2022 CrowdSec Sighting
- Sep 14, 2022 CrowdSec Sighting
- Dec 10, 2022 CrowdSec Sighting
- Dec 11, 2022 CrowdSec Sighting
References
- https://www.akamai.com/products/cloudtest url
- https://techdocs.akamai.com/cloudtest/changelog/june-2-2025-enhancements-and-bug-fixes/ url
- https://github.com/SystemVll/CVE-2025-49493 exploit
- https://nvd.nist.gov/vuln/detail/CVE-2025-49493 advisory
- https://techdocs.akamai.com/cloudtest/changelog/june-2-2025-enhancements-and-bug-fixes url
- Nuclei Template exploit