📦 Dataspider Servista

This XXE vulnerability in DataSpider Servista allows attackers to read arbitrary files from the server's file system or cause denial-of-service by sending specially crafted XML requests. It affects Da...

DataSpider Servista versions 4.4 and earlier use a hard-coded cryptographic key in ScriptRunner components, allowing attackers who gain access to a Launch Settings file to decrypt and execute operatio...