GCVE - cpe:2.3:a:sick:field_analytics:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sick:field_analytics:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sick (`7f3a0778-9cb3-5791-a25c-ef23979e3fe0`)
Product	Field Analytics (`fc73c341-4c82-5ea0-b24f-4df2f24d11df`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-49200`	vulnerable	2026-06-08 07:29:12.721049	Unencrypted backup contains sensitive information MEDIUM (6.5) The created backup files are unencrypted, making the application vulnerable for gathering sensitive information by downloading and decompressing the backup files. Published: 2025-06-12T14:27:57.643Z Updated: 2025-06-17T18:59:46.867Z Open on db.gcve.eu Reference links https://sick.com/psirt https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49199`	vulnerable	2026-06-08 07:29:12.720628	Backup files can be modified and uploaded HIGH (8.8) The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable. They can redirect traffic that is meant to be internal to their own hosted services and gathering information. Published: 2025-06-12T14:26:32.507Z Updated: 2025-06-17T19:02:18.155Z Open on db.gcve.eu Reference links https://sick.com/psirt https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49196`	vulnerable	2026-06-08 07:29:12.719421	Deprecated TLS version supported MEDIUM (6.5) A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive information, modify data in unexpected ways or spoof identities of other users or devices, affecting the confidentiality and integrity of the device. Published: 2025-06-12T14:20:53.321Z Updated: 2025-06-17T19:03:56.791Z Open on db.gcve.eu Reference links https://sick.com/psirt https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49193`	vulnerable	2026-06-08 07:29:12.717478	Missing HTTP Security Headers MEDIUM (4.2) The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks). Published: 2025-06-12T14:15:07.492Z Updated: 2026-05-13T12:01:55.151Z Open on db.gcve.eu Reference links https://sick.com/psirt https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49191`	vulnerable	2026-06-08 07:29:12.702553	Dashboards and iFrames can link malicious web content MEDIUM (4.8) Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded as iFrame widgets, making it possible to attack other users that access the dashboard by including malicious code. The attack is only possible if the attacker is authorized to create new dashboards or iFrame widgets. Published: 2025-06-12T14:08:02.756Z Updated: 2025-06-12T14:12:22.866Z Open on db.gcve.eu Reference links https://sick.com/psirt https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49190`	vulnerable	2026-06-08 07:29:12.702044	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49188`	vulnerable	2026-06-08 07:29:12.701253	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49187`	vulnerable	2026-06-08 07:29:12.700896	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49186`	vulnerable	2026-06-08 07:29:12.700012	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49185`	vulnerable	2026-06-08 07:29:12.693986	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49184`	vulnerable	2026-06-08 07:29:12.689332	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.