{"advisories":[{"id":"EUVD-2025-19583","source":"euvd","title":"Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19583"}],"cve":"CVE-2025-49493","enrichment":{"created":"2025-07-06T22:16:26.003922+00:00","updated":"2025-07-06T22:16:26.003966+00:00","vendors":["akamai","akamai$PRODUCT$cloudtest"]},"epss":{"score":0.02377},"mitre":{"cpes":[],"created":"2025-06-30T00:00:00+00:00","description":"Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N"},"cvssV4_0":{}},"mitre_repo_path":"cves/2025/49xxx/CVE-2025-49493.json","references":["https://techdocs.akamai.com/cloudtest/changelog/june-2-2025-enhancements-and-bug-fixes/","https://www.akamai.com/products/cloudtest"],"title":null,"updated":"2025-09-24T18:19:47.784000+00:00","vendors":[],"weaknesses":["CWE-611"]},"nvd":{"cpes":[],"created":"2025-06-30T20:15:25.060000+00:00","description":"Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N"},"cvssV4_0":{}},"nvd_repo_path":"2025/CVE-2025-49493.json","references":["https://github.com/SystemVll/CVE-2025-49493","https://techdocs.akamai.com/cloudtest/changelog/june-2-2025-enhancements-and-bug-fixes/","https://www.akamai.com/products/cloudtest"],"title":null,"updated":"2026-06-17T09:31:23.293000+00:00","vendors":[],"weaknesses":["CWE-611"]},"opencve":{"changes":[{"created":"2025-06-30T19:45:00+00:00","data":[{"details":{"new":"Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.","old":null},"type":"description"},{"details":{"added":["CWE-611"],"removed":[]},"type":"weaknesses"},{"details":{"added":["https://techdocs.akamai.com/cloudtest/changelog/june-2-2025-enhancements-and-bug-fixes/","https://www.akamai.com/products/cloudtest"],"removed":[]},"type":"references"},{"details":{"added":{"cvssV3_1":{"score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"7789c3e6-4416-4eaf-bf86-f9847a80ac51"},{"created":"2025-06-30T21:15:00+00:00","data":[{"details":{"added":{"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"9ab00e45-82c9-4799-af95-0caa21cff698"},{"created":"2025-07-13T13:45:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"epss":{"new":{"score":0.01823},"old":{"score":0.00059}}}},"type":"metrics"}],"id":"42d70393-48c4-4af2-bbd6-c8e5127764f1"},{"created":"2025-07-16T13:45:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"epss":{"new":{"score":0.01017},"old":{"score":0.01823}}}},"type":"metrics"}],"id":"e9c30698-3f00-4826-bc88-e3f3b162a1e2"},{"created":"2025-09-24T19:15:00+00:00","data":[{"details":{"added":["https://github.com/SystemVll/CVE-2025-49493"],"removed":[]},"type":"references"},{"details":{"added":{},"removed":{},"updated":{"ssvc":{"new":{"options":{"Automatable":"yes","Exploitation":"poc","Technical Impact":"partial"},"version":"2.0.3"},"old":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}}}},"type":"metrics"}],"id":"34373329-4612-4209-9e71-8a84d2f4ed65"}],"cpes":{"data":[],"providers":[]},"created":{"data":"2025-06-30T00:00:00+00:00","provider":"mitre"},"description":{"data":"Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.02377},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"yes","Exploitation":"poc","Technical Impact":"partial"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://github.com/SystemVll/CVE-2025-49493","https://techdocs.akamai.com/cloudtest/changelog/june-2-2025-enhancements-and-bug-fixes/","https://www.akamai.com/products/cloudtest"],"providers":["mitre","nvd","vulnrichment"]},"title":{"data":null,"provider":null},"updated":{"data":"2026-04-15T00:35:42.020000+00:00","provider":"nvd"},"vendors":{"data":["akamai","akamai$PRODUCT$cloudtest"],"providers":["enrichment"]},"weaknesses":{"data":["CWE-611"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2025-06-30T00:00:00+00:00","description":"Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"yes","Exploitation":"poc","Technical Impact":"partial"},"version":"2.0.3"}},"references":["https://github.com/SystemVll/CVE-2025-49493"],"title":null,"updated":"2025-06-30T20:23:24.617000+00:00","vendors":[],"vulnrichment_repo_path":"2025/49xxx/CVE-2025-49493.json","weaknesses":[]}}