---
id: 5218
title: "CVE-2025-49493: XML External Entity (XXE) Injection in Akamai CloudTest"
cve: CVE-2025-49493
source_domain: xbow.com
source_url: "https://xbow.com/blog/xbow-akamai-cloudtest-xxe"
published_at: "2025-06-30T12:00:00Z"
tags: ["cloud", "cloud-security", "vulnerability-research", "soap", "xxe", "akamai", "cve-2025-49493"]
phying_url: "https://phying.com/item/5218"
lang: en
---

# CVE-2025-49493: XML External Entity (XXE) Injection in Akamai CloudTest

## Summary

Walks through XBOW's autonomously found XXE in Akamai CloudTest (CVE-2025-49493), pinned to the RepositoryService SOAP endpoint where verbose XML errors confirmed the server parsed attacker input.

## Intelligence Metadata

- **Sources:** xbow.com
- **CVE:** CVE-2025-49493
- **Published:** 2025-06-30T12:00:00Z
- **Original:** https://xbow.com/blog/xbow-akamai-cloudtest-xxe
- **Phying News:** https://phying.com/item/5218