Saison Dataspider Servista — known CVE vulnerabilities

Every CVE whose affected-product data names Saison Dataspider Servista, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-48006 — CVSS 9.1 (critical): Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a specially crafted request…
• CVE-2023-28937 — CVSS 8.8 (high): DataSpider Servista version 4.4 and earlier uses a hard-coded cryptographic key. DataSpider Servista is data integration software…