What is the CVSS score of CVE-2025-52491?

CVE-2025-52491 has a CVSS 3.1 base score of 5.8 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Akamai CloudTest are affected by CVE-2025-52491?

CVE-2025-52491 presents moderate security risk, a server-side request forgery vulnerability rated CVSS 5.8. Users could be tricked into performing unintended actions.. A patch is available.

How to fix or mitigate CVE-2025-52491?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Akamai CloudTest CVE-2025-52491

EUVD-2025-19582 MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2025-06-30 cve@mitre.org

SSRF

5.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.8 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

12989

EUVD ID Assigned

Mar 16, 2026 - 01:25 euvd

EUVD-2025-19582

Analysis Generated

Mar 16, 2026 - 01:25 vuln.today

CVE Published

Jun 30, 2025 - 20:15 nvd

MEDIUM 5.8

DescriptionCVE.org

Akamai CloudTest before 60 2025.06.09 (12989) allows SSRF.

Analysis

Akamai CloudTest before 60 2025.06.09 (12989) allows SSRF.

Technical ContextAI

Server-Side Request Forgery allows an attacker to induce the server to make HTTP requests to arbitrary destinations, including internal services. This vulnerability is classified as Server-Side Request Forgery (SSRF) (CWE-918).

RemediationAI

Validate and whitelist allowed URLs and IP ranges. Block requests to internal/private IP ranges. Use network segmentation to limit server-side request scope.