CVE-2025-49193: The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing…

PriorityP423medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

EPSS

0.26%

17.6th percentile

The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).

Affected

7 ranges

Vendor	Product	Version range	Fixed in
sick	media_server	< 1.5	1.5
sick_ag	baggage_analytics	< 4.6.3	4.6.3
sick_ag	field_analytics	—	—
sick_ag	logistic_diagnostic_analytics	< 4.6.3	4.6.3
sick_ag	media_server	< 1.5	1.5
sick_ag	package_analytics	< 4.6.3	4.6.3
sick_ag	tire_analytics	< 4.6.3	4.6.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.