CVE-2025-49192 - CVE House
Back to Database
Status published Medium CVE-2025-49192

Clickjacking

Vulnerability Description

The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of their computer while clicking on seemingly innocuous objects.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-49192

Credits & Attribution

No credits recorded in the NVD database.

References

More from SICK AG

View All →
CVE-2025-9914
The credentials of the users stored in the system's local...
Medium 4.3
CVE-2025-9913
Cross Site Scripting: Session Hijacking
Medium 4.5
CVE-2025-59463
Denial-of-service (DoS) via chunk size mismatch
Medium 4.3
CVE-2025-59462
Denial-of-service (DoS) via delayed or missing client response
Medium 6.5
CVE-2025-59461
API does not require authentication
High 7.6

Affected Vendor

Affected Software

SICK Field Analytics, SICK Media Server
Vulnerable Versions:
all versions, 0

Timeline

Official Publish: June 12th, 2025
Last Modified: June 12th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-1021

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.