BA
Product
Baggage Analytics
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 6Low 0
Watch
Add Baggage Analytics to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-58587 | 9.8 | Oct 6 | Improper Restriction of Excessive Authentication Attempts Affected: All versions, or not specified |
| CVE-2025-58591 | 7.5 | Oct 6 | Path Traversal Affected: All versions, or not specified |
| CVE-2025-58590 | 7.5 | Oct 6 | Path traversal Affected: through 4.6.1 |
| CVE-2025-58585 | 7.5 | Oct 6 | Sensitive Information Disclosure Through Missing Authentication Affected: All versions, or not specified |
| CVE-2025-58584 | 7.5 | Oct 6 | Plain Text Transmission of Username and Password in the URL Affected: All versions, or not specified |
| CVE-2025-9914 | 7.5 | Oct 6 | The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access Affected: All versions, or not specified |
| CVE-2025-49184 | 7.5 | Jun 12 | Information disclosure to unauthorized user Affected: All versions, or not specified |
| CVE-2025-58589 | 6.5 | Oct 6 | Information Disclosure Through Stacktrace Affected: All versions, or not specified |
| CVE-2025-49186 | 6.5 | Jun 12 | No brute-force protection Affected: All versions, or not specified |
| CVE-2025-9913 | 6.1 | Oct 6 | Cross Site Scripting: Session Hijacking Affected: All versions, or not specified |
| CVE-2025-49193 | 6.1 | Jun 12 | Missing HTTP Security Headers Affected: All versions, or not specified |
| CVE-2025-58579 | 5.3 | Oct 6 | Username Disclosure Through Missing Authentication Affected: All versions, or not specified |
| CVE-2025-58586 | 5.3 | Oct 6 | User Enumeration by excessive error output Affected: All versions, or not specified |
Showing 13