CVE-2025-48006 - CVE House

Back to Database

Status published High CVE-2025-48006

Improper restriction of XML external entity reference issue exists in...

8.8 CVSS

Vulnerability Description

Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a specially crafted request is processed, arbitrary files on the file system where the server application for the product is installed may be read, or a denial-of-service (DoS) condition may occur.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-48006

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Saison Technology Co.,Ltd.

View all reports →

Affected Software

DataSpider Servista

Vulnerable Versions:

4.4 and earlier

Timeline

Official Publish: September 29th, 2025

Last Modified: September 29th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1005 Data from Local System

T1040 Network Sniffing

T1105 Ingress Tool Transfer

Command and Control

T1499 Endpoint Denial of Service