Enterprise Analytics
Approved changes feed: RSS · Atom
cpe:2.3:a:sick_ag:enterprise_analytics:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sick Ag (af882a65-bf06-5e2e-bd49-09a5774cabaf) |
|---|---|
| Product | Enterprise Analytics (e8a8490b-8439-538e-a644-26fdd49d5d52) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-58587 |
vulnerable | 2026-06-08 07:35:18.840563 |
Improper Restriction of Excessive Authentication Attempts
MEDIUM (6.5)
The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials.
Published: 2025-10-06T07:03:15.540Z
Updated: 2026-05-13T11:51:32.625Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58586 |
vulnerable | 2026-06-08 07:35:18.839449 |
User Enumeration by excessive error output
MEDIUM (5.3)
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.
Published: 2025-10-06T07:02:47.270Z
Updated: 2026-05-13T11:56:56.941Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58584 |
vulnerable | 2026-06-08 07:35:18.837286 |
Plain Text Transmission of Username and Password in the URL
MEDIUM (5.3)
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally.
Published: 2025-10-06T07:01:04.945Z
Updated: 2026-05-13T11:55:11.969Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58583 |
vulnerable | 2026-06-08 07:35:18.836360 |
User Enumeration
MEDIUM (5.3)
The application provides access to a login protected H2 database for caching purposes. The username is prefilled.
Published: 2025-10-06T06:52:03.916Z
Updated: 2025-10-06T16:56:06.556Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58582 |
vulnerable | 2026-06-08 07:35:18.835927 |
Uncontrolled Resource Consumption via log file
MEDIUM (5.3)
If a user tries to login but the provided credentials are incorrect a log is created. The data for this POST requests is not validated and it’s possible to send giant payloads which are then logged.
Published: 2025-10-06T06:50:56.953Z
Updated: 2025-10-06T12:18:15.680Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58581 |
vulnerable | 2026-06-08 07:35:18.835501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58580 |
vulnerable | 2026-06-08 07:35:18.834972 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58579 |
vulnerable | 2026-06-08 07:35:18.828790 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58578 |
vulnerable | 2026-06-08 07:35:18.823261 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49184 |
vulnerable | 2026-06-08 07:29:12.686995 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.