🔐 CVE Alert

CVE-2025-9913

MEDIUM 4.5

Cross Site Scripting: Session Hijacking

CVSS Score
4.5
EPSS Score
0.1%
EPSS Percentile
18th

JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking.

CWE CWE-79
Vendor sick ag
Product baggage analytics
Published Oct 6, 2025
Last Updated May 13, 2026
Stay Ahead of the Next One

Get instant alerts for sick ag baggage analytics

Be the first to know when new medium vulnerabilities affecting sick ag baggage analytics are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Affected Versions

SICK AG / Baggage Analytics
0 < 4.6.3
SICK AG / Tire Analytics
0 < 4.6.3
SICK AG / Package Analytics
0 < 4.6.3
SICK AG / Logistic Diagnostic Analytics
0 < 4.6.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗
sick.com: https://sick.com/psirt sick.com: https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf cisa.gov: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices first.org: https://www.first.org/cvss/calculator/3.1 sick.com: https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json sick.com: https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf