CVE-2025-49193mediumCWE-693

CVE-2025-49193: medium-severity vulnerability in SICK AG Baggage Analytics

Missing HTTP Security Headers

Published · Updated

Follow this CVE+ Monitor Package Analytics+ Monitor Baggage Analytics

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.2epss 0.3%
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected products
SICK AG · Baggage AnalyticsSICK AG · Field AnalyticsSICK AG · Logistic Diagnostic AnalyticsSICK AG · Media ServerSICK AG · Package AnalyticsSICK AG · Tire Analytics
Related CVEs — SICK AG Baggage Analytics

In the same product, most dangerous first.

CVE-2025-58591MEDIUMPath TraversalEPSS 0.5%CVE-2025-58590MEDIUMPath traversalEPSS 0.5%CVE-2025-49184HIGHInformation disclosure to unauthorized userEPSS 0.5%CVE-2025-58587MEDIUMImproper Restriction of Excessive Authentication AttemptsEPSS 0.5%CVE-2025-58585MEDIUMSensitive Information Disclosure Through Missing AuthenticationEPSS 0.4%CVE-2025-58579MEDIUMUsername Disclosure Through Missing AuthenticationEPSS 0.4%