What’s Vulnerable › Vulnerabilities

CVE-2025-49493

• Severity: medium (CVSS 5.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-06-30 · updated 2026-06-17
• Weakness: CWE-611

Description

Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.

Affected products

• Akamai CloudTest: before 12988 — fixed in 12988

How to fix

Upgrade to a fixed version: Akamai CloudTest 12988. Check the vendor advisory for mitigations.

References

• https://techdocs.akamai.com/cloudtest/changelog/june-2-2025-enhancements-and-bug-fixes/
• https://www.akamai.com/products/cloudtest
• https://github.com/SystemVll/CVE-2025-49493

Get alerted when CVE-2025-49493 or the next vulnerability affects your stack