PA
Product
Package Analytics
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 7Low 0
Watch
Add Package Analytics to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-58587 | 9.8 | Oct 6 | Improper Restriction of Excessive Authentication Attempts Affected: All versions, or not specified |
| CVE-2020-2076 | 9.8 | Jul 29 | SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API Affected: through 04.0.0 |
| CVE-2025-58591 | 7.5 | Oct 6 | Path Traversal Affected: All versions, or not specified |
| CVE-2025-58590 | 7.5 | Oct 6 | Path traversal Affected: through 4.6.1 |
| CVE-2025-58585 | 7.5 | Oct 6 | Sensitive Information Disclosure Through Missing Authentication Affected: All versions, or not specified |
| CVE-2025-58584 | 7.5 | Oct 6 | Plain Text Transmission of Username and Password in the URL Affected: All versions, or not specified |
| CVE-2025-9914 | 7.5 | Oct 6 | The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access Affected: All versions, or not specified |
| CVE-2025-49184 | 7.5 | Jun 12 | Information disclosure to unauthorized user Affected: All versions, or not specified |
| CVE-2020-2077 | 7.5 | Jul 29 | SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings Affected: through 04.0.0 |
| CVE-2025-58589 | 6.5 | Oct 6 | Information Disclosure Through Stacktrace Affected: All versions, or not specified |
| CVE-2025-49186 | 6.5 | Jun 12 | No brute-force protection Affected: All versions, or not specified |
| CVE-2020-2078 | 6.5 | Jul 29 | Passwords are stored in plain text within the configuration of SICK Package Analytics software up to and including V04.1.1 Affected: through 04.1.1 |
| CVE-2025-9913 | 6.1 | Oct 6 | Cross Site Scripting: Session Hijacking Affected: All versions, or not specified |
| CVE-2025-49193 | 6.1 | Jun 12 | Missing HTTP Security Headers Affected: All versions, or not specified |
| CVE-2025-58579 | 5.3 | Oct 6 | Username Disclosure Through Missing Authentication Affected: All versions, or not specified |
| CVE-2025-58586 | 5.3 | Oct 6 | User Enumeration by excessive error output Affected: All versions, or not specified |
Showing 16