Description
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).
References (6)
Scores
CVSS v3
4.2
EPSS
0.0029
EPSS Percentile
52.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-693
Status
published
Products (6)
sick/baggage_analytics
sick/field_analytics
sick/logistic_diagnostic_analytics
sick/media_server
< 1.5
sick/package_analytics
sick/tire_analytics
Published
Jun 12, 2025
Tracked Since
Feb 18, 2026