CVE-2025-49193 Missing HTTP Security Headers
The application lacks essential HTTP security headers, increasing susceptibility to clickjacking and XSS attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-49193?
CVE-2025-49193 is a medium-severity vulnerability in SICK AG Baggage Analytics, published on 12 Jun 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).
Weakness: CWE-693
Which versions are affected by CVE-2025-49193?
It affects 6 products.
Products include Sick Baggage Analytics, Sick Field Analytics, Sick Logistic Diagnostic Analytics, Sick Media Server, Sick Package Analytics, Sick Tire Analytics.
How do I fix CVE-2025-49193?
No fix has been published for CVE-2025-49193 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-49193 being exploited?
There is no known exploitation of CVE-2025-49193 in the wild and no public exploit code.
Other vulnerabilities in SICK AG Baggage Analytics
Sources
Also known as GHSA-p883-qggf-j55h.