Skip to main content

Field Analytics EUVDEUVD-2025-18176

| CVE-2025-49200 MEDIUM
Information Exposure (CWE-200)
2025-06-12 psirt@sick.de
Information Disclosure Field Analytics
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

3
EUVD ID Assigned
Mar 14, 2026 - 21:20 euvd
EUVD-2025-18176
Analysis Generated
Mar 14, 2026 - 21:20 vuln.today
CVE Published
Jun 12, 2025 - 15:15 nvd
MEDIUM 6.5

DescriptionCVE.org

The created backup files are unencrypted, making the application vulnerable for gathering sensitive information by downloading and decompressing the backup files.

Analysis

The created backup files are unencrypted, making the application vulnerable for gathering sensitive information by downloading and decompressing the backup files.

Technical ContextAI

Information disclosure occurs when an application inadvertently reveals sensitive data to unauthorized actors through error messages, logs, or improper access controls. This vulnerability is classified as Information Exposure (CWE-200).

RemediationAI

Implement proper access controls. Sanitize error messages in production. Review logging practices to avoid capturing sensitive data.

More in Field Analytics

View all
CVE-2025-49199 HIGH
8.8 Jun 12

CVE-2025-49199 is a security vulnerability (CVSS 8.8) that allows the attacker. High severity vulnerability requiring pr
CVE-2025-49184 HIGH
7.5 Jun 12

A information disclosure vulnerability (CVSS 7.5). High severity vulnerability requiring prompt remediation.
CVE-2025-49196 MEDIUM
6.5 Jun 12

A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive informati
CVE-2025-49185 MEDIUM
5.5 Jun 12

The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboard widgets can
CVE-2025-49188 MEDIUM
5.3 Jun 12

CVE-2025-49188 is a security vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management proce
CVE-2025-49187 MEDIUM
5.3 Jun 12

CVE-2025-49187 is a security vulnerability (CVSS 5.3) that allows an attacker. Remediation should follow standard vulner
CVE-2025-49186 MEDIUM
5.3 Jun 12

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short tim
CVE-2025-49191 MEDIUM
4.8 Jun 12

Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded
CVE-2025-49190 MEDIUM
4.3 Jun 12

The application is vulnerable to Server-Side Request Forgery (SSRF). An endpoint can be used to send server internal req
CVE-2025-49192 MEDIUM
4.3 Jun 12

The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an atta
CVE-2025-49193 MEDIUM
4.2 Jun 12

The application fails to implement several security headers. These headers help increase the overall security level of t

Same weakness CWE-200 – Information Exposure

View all
CVE-2024-24919 HIGH POC
8.6
CVE-2016-6415 HIGH POC
7.5
CVE-2013-7331 MEDIUM POC
6.5
CVE-2025-31125 MEDIUM POC
5.3
CVE-2025-11749 CRITICAL POC
9.8
CVE-2017-16894 HIGH POC
7.5
CVE-2017-11165 CRITICAL POC
9.8
CVE-2020-3259 HIGH
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

EUVD-2025-18176 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy