Vulnerability Details CVE-2025-48006
Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a specially crafted request is processed, arbitrary files on the file system where the server application for the product is installed may be read, or a denial-of-service (DoS) condition may occur.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.2%
CVSS Severity
CVSS v3 Score 8.2
References
Products affected by CVE-2025-48006
-
cpe:2.3:a:saison:dataspider_servista:-
-
cpe:2.3:a:saison:dataspider_servista:4.1
-
cpe:2.3:a:saison:dataspider_servista:4.2
-
cpe:2.3:a:saison:dataspider_servista:4.3
-
cpe:2.3:a:saison:dataspider_servista:4.4