GCVE - cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sick (`7f3a0778-9cb3-5791-a25c-ef23979e3fe0`)
Product	Baggage Analytics (`9984d5fa-f8c2-54f9-a84e-93b8389bcd48`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9914`	vulnerable	2026-06-08 07:47:10.270148	Details available MEDIUM (4.3) The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access. This could potentially affect the confidentiality of the application. Published: 2025-10-06T06:45:59.874Z Updated: 2026-05-13T11:48:19.759Z Open on db.gcve.eu Reference links https://sick.com/psirt https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-9913`	vulnerable	2026-06-08 07:47:10.265681	Cross Site Scripting: Session Hijacking MEDIUM (4.5) JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking. Published: 2025-10-06T06:40:49.940Z Updated: 2026-05-13T11:49:22.706Z Open on db.gcve.eu Reference links https://sick.com/psirt https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58591`	vulnerable	2026-06-08 07:35:18.848553	Path Traversal MEDIUM (6.5) A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information. Published: 2025-10-06T07:07:30.103Z Updated: 2026-05-13T11:53:53.954Z Open on db.gcve.eu Reference links https://sick.com/psirt https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58590`	vulnerable	2026-06-08 07:35:18.847911	Path traversal MEDIUM (6.5) It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information. Published: 2025-10-06T07:06:26.315Z Updated: 2025-10-06T17:42:15.992Z Open on db.gcve.eu Reference links https://sick.com/psirt https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58589`	vulnerable	2026-06-08 07:35:18.841832	Information Disclosure Through Stacktrace LOW (2.7) When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application. Published: 2025-10-06T07:03:41.488Z Updated: 2026-05-13T11:52:23.944Z Open on db.gcve.eu Reference links https://sick.com/psirt https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58587`	vulnerable	2026-06-08 07:35:18.840584	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58586`	vulnerable	2026-06-08 07:35:18.839469	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58585`	vulnerable	2026-06-08 07:35:18.838380	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58584`	vulnerable	2026-06-08 07:35:18.837307	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58579`	vulnerable	2026-06-08 07:35:18.829952	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49193`	vulnerable	2026-06-08 07:29:12.717373	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49186`	vulnerable	2026-06-08 07:29:12.699873	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49184`	vulnerable	2026-06-08 07:29:12.687638	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.