CVE-2025-49185 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboard widgets can inject malicious JavaScript code into t…
Medium CVSS: 5.5

CVE-2025-49185

The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboard widgets can inject malicious JavaScript code into the Transform Function which will be executed when the widget receives data from its data source.
Vendor
Sick
Product
Field Analytics
CWE
CWE-79
Yayın Tarihi
2025-06-12 14:15:30
Güncelleme
2026-01-29 17:33:37
Source Identifier
psirt@sick.de
KEV Date Added
-

Kategoriler

CWE-79 Field Analytics MEDIUM Sick 2025

Referanslar

https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF https://sick.com/psirt https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf