Skip to main content

Field Analytics EUVDEUVD-2025-18189

| CVE-2025-49187 MEDIUM
Observable Response Discrepancy (CWE-204)
2025-06-12 psirt@sick.de
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

3
EUVD ID Assigned
Mar 14, 2026 - 21:20 euvd
EUVD-2025-18189
Analysis Generated
Mar 14, 2026 - 21:20 vuln.today
CVE Published
Jun 12, 2025 - 14:15 nvd
MEDIUM 5.3

DescriptionCVE.org

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.

AnalysisAI

CVE-2025-49187 is a security vulnerability (CVSS 5.3) that allows an attacker. Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor.

RemediationAI

Monitor vendor channels for patch availability.

CVE-2025-49199 HIGH
8.8 Jun 12

CVE-2025-49199 is a security vulnerability (CVSS 8.8) that allows the attacker. High severity vulnerability requiring pr

CVE-2025-49184 HIGH
7.5 Jun 12

A information disclosure vulnerability (CVSS 7.5). High severity vulnerability requiring prompt remediation.

CVE-2025-49200 MEDIUM
6.5 Jun 12

The created backup files are unencrypted, making the application vulnerable for gathering sensitive information by downl

CVE-2025-49196 MEDIUM
6.5 Jun 12

A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive informati

CVE-2025-49185 MEDIUM
5.5 Jun 12

The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboard widgets can

CVE-2025-49188 MEDIUM
5.3 Jun 12

CVE-2025-49188 is a security vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management proce

CVE-2025-49186 MEDIUM
5.3 Jun 12

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short tim

CVE-2025-49191 MEDIUM
4.8 Jun 12

Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded

CVE-2025-49190 MEDIUM
4.3 Jun 12

The application is vulnerable to Server-Side Request Forgery (SSRF). An endpoint can be used to send server internal req

CVE-2025-49192 MEDIUM
4.3 Jun 12

The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an atta

CVE-2025-49193 MEDIUM
4.2 Jun 12

The application fails to implement several security headers. These headers help increase the overall security level of t

Share

EUVD-2025-18189 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy