Approved changes feed: RSS · Atom

cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSick (7f3a0778-9cb3-5791-a25c-ef23979e3fe0)
ProductLogistic Diagnostic Analytics (2050c01a-d059-5aeb-8a9d-f4ba280e5a39)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9914 vulnerable 2026-06-08 07:47:10.270259 Details available
MEDIUM (4.3)
The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access. This could potentially affect the confidentiality of the application.
Published: 2025-10-06T06:45:59.874Z
Updated: 2026-05-13T11:48:19.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9913 vulnerable 2026-06-08 07:47:10.266928 Cross Site Scripting: Session Hijacking
MEDIUM (4.5)
JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking.
Published: 2025-10-06T06:40:49.940Z
Updated: 2026-05-13T11:49:22.706Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58591 vulnerable 2026-06-08 07:35:18.848574 Path Traversal
MEDIUM (6.5)
A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information.
Published: 2025-10-06T07:07:30.103Z
Updated: 2026-05-13T11:53:53.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58590 vulnerable 2026-06-08 07:35:18.847932 Path traversal
MEDIUM (6.5)
It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information.
Published: 2025-10-06T07:06:26.315Z
Updated: 2025-10-06T17:42:15.992Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58589 vulnerable 2026-06-08 07:35:18.841852 Information Disclosure Through Stacktrace
LOW (2.7)
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.
Published: 2025-10-06T07:03:41.488Z
Updated: 2026-05-13T11:52:23.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58587 vulnerable 2026-06-08 07:35:18.840835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58586 vulnerable 2026-06-08 07:35:18.839586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58585 vulnerable 2026-06-08 07:35:18.838400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58584 vulnerable 2026-06-08 07:35:18.837568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58579 vulnerable 2026-06-08 07:35:18.831580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49193 vulnerable 2026-06-08 07:29:12.717604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49186 vulnerable 2026-06-08 07:29:12.700120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49184 vulnerable 2026-06-08 07:29:12.690287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.