Sick AG vulnerabilities
116 CVEs and advisories name Sick AG as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-58590Path traversal
- CVE-2025-58589Information Disclosure Through Stacktrace
- CVE-2025-58587Improper Restriction of Excessive Authentication Attempts
- CVE-2025-58586User Enumeration by excessive error output
- CVE-2025-58585Sensitive Information Disclosure Through Missing Authentication
- CVE-2025-58584Plain Text Transmission of Username and Password in the URL
- CVE-2025-58583User Enumeration
- CVE-2025-58582Uncontrolled Resource Consumption via log file
- CVE-2025-58581Information Disclosure Through Stacktrace-/MQTT/Config/changeAll
- CVE-2025-58580Injection via log file
- CVE-2025-58578Unlimited user creation by authorized users
- CVE-2025-9914The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain un
- CVE-2025-9913Cross Site Scripting: Session Hijacking
- CVE-2025-49200Unencrypted backup contains sensitive information
- CVE-2025-49199Backup files can be modified and uploaded
- CVE-2025-49198Poor quality of randomness in authorization tokens
- CVE-2025-49197Deprecated TLS version supported
- CVE-2025-49196Deprecated TLS version supported
- CVE-2025-49195No protection against brute-force attacks
- CVE-2025-49194Unencrypted communication
- CVE-2025-49193Missing HTTP Security Headers
- CVE-2025-49192Clickjacking
- CVE-2025-49191Dashboards and iFrames can link malicious web content
- CVE-2025-49190Server-Side Request Forgery
- CVE-2025-49189Cookie missing HttpOnly flag
- CVE-2025-49188Sensitive Data in URL
- CVE-2025-49187User enumeration
- CVE-2025-49186No brute-force protection
- CVE-2025-49185Stored Cross-Site-Script
- CVE-2025-49184Information disclosure to unauthorized user