CVE-2025-48006

creationtimestamp| type| source ---|---|--- 2025-09-29 07:57:18+00:00| seen| Telegram/Hd1nbfa1s3ZNEmkJ5HfeozfdJhMX6uxYtFJ4fLmrSQ6DFHE...

CVE-2025-48006

Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a specially crafted request is processed, arbitrary files on the file system where the server application for the product is installed may be read, or a denial-of-service DoS condition ma...

DataSpider Servista improper restriction of XML external entity references

Overview DataSpider Servista provided by Saison Technology Co.,Ltd. is a data integration software. DataSpider Servista contains the following vulnerability. Improper restriction of XML external entity reference CWE-611 - CVE-2025-48006 Shigeaki Tsunoda of Cyber Defense Institute, Inc. reported...