Akamai CloudTest < 60 2025.06.02 - XML External Entity (XXE)

Akamai CloudTest before 60 2025.06.02 12988 allows file inclusion via XML External Entity XXE injection. id: CVE-2025-49493 info: name: Akamai CloudTest 60 2025.06.02 - XML External Entity XXE author: xbow,3th1cyuk1 severity: critical description: | Akamai CloudTest before 60 2025.06.02 12988...

CVE-2025-49493

Akamai CloudTest XXEエクスプロイト CVE-2025-49493 概要 これはCVE-2025-49493 用のPythonベースのエクスプロイトで、Akamai CloudTestのバージョン60 2025.06.02 12988 より前のバージョンに影響します。この脆弱性により、SOAPサービスエンドポイントを介したXML外部実体（XXE）インジェクションが可能になります。 脆弱性の詳細 CVE ID : CVE-2025-49493 脆弱性タイプ : XML外部実体（XXE）インジェクション 深刻度 : 緊急 CVSS 9.1 影響を受けるソフトウェア :...

EUVD-2019-2722

Malware in sbrugna...

EUVD-2025-19582

Malicious code in bioql PyPI...

EUVD-2025-19583

Malicious code in bioql PyPI...

EUVD-2022-3786

Malicious code in bioql PyPI...

VulnCheck KEV: CVE-2025-49493

Akamai CloudTest before 60 2025.06.02 12988 allows file inclusion via XML External Entity XXE injection...

Exploit for CVE-2025-49493

Akamai CloudTest XXE Exploit CVE-2025-49493 Overview Th...

Akamai CloudTest XML Injection

This is a Python-based exploit for CVE-2025-49493, which affects Akamai CloudTest versions before 60 2025.06.02 12988. The vulnerability allows for XML External Entity XXE injection through the SOAP service endpoint...

The vulnerability of the Akamai CloudTest performance testing platform lies in the improper limitation of XML links to external objects, which allows attackers to compromise privacy.

The vulnerability of the Akamai CloudTest performance testing platform relates to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to compromise privacy...

Exploit for CVE-2025-49493

CVE-2025-49493 Akamai CloudTest - XXE Injection ☁️ 📄 Descr...

CVE-2025-52491

Akamai CloudTest before 60 2025.06.09 12989 allows SSRF...

CVE-2025-49493

Akamai CloudTest before 60 2025.06.02 12988 allows file inclusion via XML External Entity XXE injection...

CVE-2025-49493

Akamai CloudTest before 60 2025.06.02 12988 allows file inclusion via XML External Entity XXE injection...

CVE-2025-52491

Akamai CloudTest before 60 2025.06.09 12989 allows SSRF...

CVE-2025-49493

Akamai CloudTest before 60 2025.06.02 12988 allows file inclusion via XML External Entity XXE injection...

CVE-2025-52491

CVE-2025-52491 affects Akamai CloudTest prior to version 60 2025.06.09 (12989) and allows server-side request forgery (SSRF). The NVD entry lists CVSS 3.1 base score 5.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N). Connected sources confirm the affected release and remediation guidance; PT-2025-27471 r...

CVE-2025-49493

Akamai CloudTest before 60 2025.06.02 (12988) is affected by an XXE injection in SOAP endpoints (e.g., RepositoryService). The flaw can allow unauthenticated reading of local files; CVSS v3.1: 9.1. Remediation: upgrade to CloudTest 60 2025.06.02 (12988) or later, which disables external entity pr...

CVE-2025-52491

Akamai CloudTest before 60 2025.06.09 12989 allows SSRF...

Akamai CloudTest 代码问题漏洞

Akamai CloudTest is a suite of scalable load testing platforms from Akamai, USA. A code issue vulnerability exists in Akamai CloudTest versions prior to 2025.06.02, which stems from XML external entity injection and may result in file inclusion...