Skip to main content

Field Analytics CVE-2025-49199

| EUVDEUVD-2025-18177 HIGH
Insufficient Verification of Data Authenticity (CWE-345)
2025-06-12 psirt@sick.de
Information Disclosure Authentication Bypass Denial Of Service Field Analytics
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
EUVD ID Assigned
Mar 14, 2026 - 21:20 euvd
EUVD-2025-18177
Analysis Generated
Mar 14, 2026 - 21:20 vuln.today
CVE Published
Jun 12, 2025 - 15:15 nvd
HIGH 8.8

DescriptionCVE.org

The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable. They can redirect traffic that is meant to be internal to their own hosted services and gathering information.

AnalysisAI

CVE-2025-49199 is a security vulnerability (CVSS 8.8) that allows the attacker. High severity vulnerability requiring prompt remediation.

Technical ContextAI

Vulnerability type not specified by vendor. CVSS 8.8 indicates high severity.

RemediationAI

Monitor vendor channels for patch availability.

More in Field Analytics

View all
CVE-2025-49184 HIGH
7.5 Jun 12

A information disclosure vulnerability (CVSS 7.5). High severity vulnerability requiring prompt remediation.
CVE-2025-49200 MEDIUM
6.5 Jun 12

The created backup files are unencrypted, making the application vulnerable for gathering sensitive information by downl
CVE-2025-49196 MEDIUM
6.5 Jun 12

A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive informati
CVE-2025-49185 MEDIUM
5.5 Jun 12

The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboard widgets can
CVE-2025-49188 MEDIUM
5.3 Jun 12

CVE-2025-49188 is a security vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management proce
CVE-2025-49187 MEDIUM
5.3 Jun 12

CVE-2025-49187 is a security vulnerability (CVSS 5.3) that allows an attacker. Remediation should follow standard vulner
CVE-2025-49186 MEDIUM
5.3 Jun 12

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short tim
CVE-2025-49191 MEDIUM
4.8 Jun 12

Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded
CVE-2025-49190 MEDIUM
4.3 Jun 12

The application is vulnerable to Server-Side Request Forgery (SSRF). An endpoint can be used to send server internal req
CVE-2025-49192 MEDIUM
4.3 Jun 12

The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an atta
CVE-2025-49193 MEDIUM
4.2 Jun 12

The application fails to implement several security headers. These headers help increase the overall security level of t

Same weakness CWE-345 – Insufficient Verification of Data Authenticity

View all
CVE-2023-38831 HIGH POC
7.8
CVE-2016-4553 HIGH
8.6
CVE-2016-4554 HIGH
8.6
CVE-2014-4936 CRITICAL POC
9.3
CVE-2025-66255 CRITICAL POC
9.9
CVE-2025-1945 CRITICAL POC
9.8
CVE-2024-11666 CRITICAL POC
9.8
CVE-2024-1554 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2025-49199 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy