CVE-2025-49193: Missing HTTP Security Headers
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).
Affected Software
Remediation
Information
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49193?
CVE-2025-49193 is categorized as a high severity vulnerability due to the absence of critical HTTP security headers.
How do I fix CVE-2025-49193?
To fix CVE-2025-49193, implement missing HTTP security headers such as X-Content-Type-Options, X-Frame-Options, and Content-Security-Policy.
What are the implications of CVE-2025-49193?
The implications of CVE-2025-49193 include increased risk of clickjacking attacks and execution of malicious scripts on the affected web applications.
Which software is affected by CVE-2025-49193?
CVE-2025-49193 affects various SICK applications, including Baggage Analytics, Field Analytics, and Media Server versions prior to 1.5.
How does CVE-2025-49193 affect web application security?
CVE-2025-49193 affects web application security by failing to prevent unauthorized framing and script execution, thereby exposing users to potential attacks.