CVE Feed

    Dashboard / CVE / CVE-2025-58578

    CVE-2025-58578

    A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation.

    Published:Oct 6, 2025
    Last Modified:Jan 27, 2026
    EPS:Oct 6, 2025
    EPSS Score:0.00064
    CVSS Score:3.8

    Affected Products

    Vendor
    Sick
    Product
    Enterprise Analytics

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-58579 (CVSS 5.3) — Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint…
    CVE-2025-58587 (CVSS 6.5) — The application does not implement sufficient measures to prevent multiple failed authentication attempts with…
    CVE-2025-58586 (CVSS 5.3) — For failed login attempts, the application returns different error messages depending on whether the login fai…
    CVE-2025-58584 (CVSS 5.3) — In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URL…
    CVE-2025-58583 (CVSS 5.3) — The application provides access to a login protected H2 database for caching purposes. The username…
    CVE-2025-58582 (CVSS 5.3) — If a user tries to login but the provided credentials are incorrect a log is created. The data for this POST r…
    CVE-2025-58581 (CVSS 4.3) — When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class…
    CVE-2025-58580 (CVSS 6.5) — An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient va…
    CVE-2025-49184 (CVSS 7.5) — A remote unauthorized attacker may gather sensitive information of the application, due to missing authorizati…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High