Approved changes feed: RSS · Atom

cpe:2.3:a:sick_ag:field_analytics:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSick Ag (af882a65-bf06-5e2e-bd49-09a5774cabaf)
ProductField Analytics (01532699-c3c7-50d8-9dfe-0106ca714947)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49193 vulnerable 2026-06-08 07:29:12.707650 Missing HTTP Security Headers
MEDIUM (4.2)
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).
Published: 2025-06-12T14:15:07.492Z
Updated: 2026-05-13T12:01:55.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49186 vulnerable 2026-06-08 07:29:12.694514 No brute-force protection
MEDIUM (5.3)
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks.
Published: 2025-06-12T13:27:43.484Z
Updated: 2026-05-13T11:59:58.918Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49184 vulnerable 2026-06-08 07:29:12.680205 Information disclosure to unauthorized user
HIGH (7.5)
A remote unauthorized attacker may gather sensitive information of the application, due to missing authorization of configuration settings of the product.
Published: 2025-06-12T13:24:06.663Z
Updated: 2025-10-06T07:18:45.437Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.