Saison vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Saison products: 1 record(s), with severity, exploitation and fixes.

Dataspider Servista 1

Exploited only (KEV) →

CVE-2025-48006 Critical · 9.1 CWE-611 Sep 29, 2025

XML External Entity (XXE) in Saison Dataspider Servista

Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a specially crafted request is processed, arbitrary files on the file system where the server application for the product is installed may be read, or a denial-of-service (DoS) condition may occur.