VULNERABILITY INTELLIGENCE

CVE-2025-49193

CVSS score4.2 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2025-06-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Description

The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).

Weakness classification

  • psirt@sick.de: CWE-693

Primary references