Skip to main content

Field Analytics CVE-2025-49188

| EUVDEUVD-2025-18184 MEDIUM
Use of GET Request Method With Sensitive Query Strings (CWE-598)
2025-06-12 psirt@sick.de
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

3
EUVD ID Assigned
Mar 14, 2026 - 21:20 euvd
EUVD-2025-18184
Analysis Generated
Mar 14, 2026 - 21:20 vuln.today
CVE Published
Jun 12, 2025 - 14:15 nvd
MEDIUM 5.3

DescriptionCVE.org

The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering.

AnalysisAI

CVE-2025-49188 is a security vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor.

RemediationAI

Monitor vendor channels for patch availability.

CVE-2025-49199 HIGH
8.8 Jun 12

CVE-2025-49199 is a security vulnerability (CVSS 8.8) that allows the attacker. High severity vulnerability requiring pr

CVE-2025-49184 HIGH
7.5 Jun 12

A information disclosure vulnerability (CVSS 7.5). High severity vulnerability requiring prompt remediation.

CVE-2025-49200 MEDIUM
6.5 Jun 12

The created backup files are unencrypted, making the application vulnerable for gathering sensitive information by downl

CVE-2025-49196 MEDIUM
6.5 Jun 12

A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive informati

CVE-2025-49185 MEDIUM
5.5 Jun 12

The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboard widgets can

CVE-2025-49187 MEDIUM
5.3 Jun 12

CVE-2025-49187 is a security vulnerability (CVSS 5.3) that allows an attacker. Remediation should follow standard vulner

CVE-2025-49186 MEDIUM
5.3 Jun 12

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short tim

CVE-2025-49191 MEDIUM
4.8 Jun 12

Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded

CVE-2025-49190 MEDIUM
4.3 Jun 12

The application is vulnerable to Server-Side Request Forgery (SSRF). An endpoint can be used to send server internal req

CVE-2025-49192 MEDIUM
4.3 Jun 12

The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an atta

CVE-2025-49193 MEDIUM
4.2 Jun 12

The application fails to implement several security headers. These headers help increase the overall security level of t

Share

CVE-2025-49188 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy