CVE-2025-49795 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 37%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Siemens	RUGGEDCOM RST2428P	𝑥 < V4.0	ADP

Debian Releases

Debian Product

Codename

libxml2

bookworm	2.9.14+dfsg-1.3~deb12u5 fixed
bookworm (security)	2.9.14+dfsg-1.3~deb12u4 fixed
bullseye	2.9.10+dfsg-6.7+deb11u4 fixed
bullseye (security)	2.9.10+dfsg-6.7+deb11u10 fixed
forky	2.15.3+dfsg-1 fixed
sid	2.15.3+dfsg-1 fixed
trixie	2.12.7+dfsg+really2.9.14-2.1+deb13u2 fixed
trixie (security)	2.12.7+dfsg+really2.9.14-2.1+deb13u1 fixed

openSUSE / SLES Releases

openSUSE Product

Release

libxml2-2

suse enterprise desktop 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise desktop 15 SP7	2.12.10-150700.4.3.1 fixed
suse enterprise sap 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise sap 15 SP7	2.12.10-150700.4.3.1 fixed
suse enterprise server 15 SP5	2.10.3-150500.5.29.1 fixed
suse enterprise server 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise server 15 SP7	2.12.10-150700.4.3.1 fixed

libxml2-2-32bit

suse enterprise desktop 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise desktop 15 SP7	2.12.10-150700.4.3.1 fixed
suse enterprise sap 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise sap 15 SP7	2.12.10-150700.4.3.1 fixed
suse enterprise server 15 SP5	2.10.3-150500.5.29.1 fixed
suse enterprise server 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise server 15 SP7	2.12.10-150700.4.3.1 fixed

libxml2-devel

suse enterprise desktop 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise desktop 15 SP7	2.12.10-150700.4.3.1 fixed
suse enterprise sap 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise sap 15 SP7	2.12.10-150700.4.3.1 fixed
suse enterprise server 15 SP5	2.10.3-150500.5.29.1 fixed
suse enterprise server 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise server 15 SP7	2.12.10-150700.4.3.1 fixed

libxml2-tools

suse enterprise desktop 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise desktop 15 SP7	2.12.10-150700.4.3.1 fixed
suse enterprise sap 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise sap 15 SP7	2.12.10-150700.4.3.1 fixed
suse enterprise server 15 SP5	2.10.3-150500.5.29.1 fixed
suse enterprise server 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise server 15 SP7	2.12.10-150700.4.3.1 fixed

python3-libxml2

suse enterprise desktop 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise desktop 15 SP7	2.12.10-150700.4.3.1 fixed
suse enterprise sap 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise sap 15 SP7	2.12.10-150700.4.3.1 fixed
suse enterprise server 15 SP5	2.10.3-150500.5.29.1 fixed
suse enterprise server 15 SP6	2.10.3-150500.5.29.1 fixed
suse enterprise server 15 SP7	2.12.10-150700.4.3.1 fixed

python311-libxml2

suse enterprise server 15 SP5

2.10.3-150500.5.29.1

fixed

Amazon Linux Releases

Amazon Package

Release

libxml2

Amazon Linux 2023

0:2.10.4-1.amzn2023.0.12

fixed

libxml2-debuginfo

Amazon Linux 2023

0:2.10.4-1.amzn2023.0.12

fixed

libxml2-debugsource

Amazon Linux 2023

0:2.10.4-1.amzn2023.0.12

fixed

libxml2-devel

Amazon Linux 2023

0:2.10.4-1.amzn2023.0.12

fixed

libxml2-static

Amazon Linux 2023

0:2.10.4-1.amzn2023.0.12

fixed

python3-libxml2

Amazon Linux 2023

0:2.10.4-1.amzn2023.0.12

fixed

python3-libxml2-debuginfo

Amazon Linux 2023

0:2.10.4-1.amzn2023.0.12

fixed

Azure Linux Releases

Azure Package

Release

libxml2

Azure Linux 3.0	0:2.11.5-7.azl3 fixed
CBL-Mariner 2.0	0:2.10.4-9.cm2 fixed

Common Weakness Enumeration

CWE-825 - Expired Pointer Dereference
The program dereferences a pointer that contains a location for memory that was previously valid, but is no longer valid.

Vulnerability Media Exposure

[GERMAN] Dell PowerProtect Data Domain: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um seine Privilegien zu erhöhen um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, und um Dateien zu manipulieren.
Published: 2026-07-02T22:00:00+00:00

References

https://access.redhat.com/errata/RHSA-2025:10630

https://access.redhat.com/errata/RHSA-2025:19020

https://access.redhat.com/errata/RHSA-2026:7519

https://access.redhat.com/security/cve/CVE-2025-49795

https://bugzilla.redhat.com/show_bug.cgi?id=2372379

https://gitlab.gnome.org/GNOME/libxml2/-/issues/932

https://cert-portal.siemens.com/productcert/html/ssa-253495.html