CVE Feed

    Dashboard / CVE / CVE-2025-58580

    CVE-2025-58580

    An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.

    Published:Oct 6, 2025
    Last Modified:Jan 27, 2026
    EPS:Oct 6, 2025
    EPSS Score:0.0007
    CVSS Score:6.5

    Affected Products

    Vendor
    Sick
    Product
    Enterprise Analytics

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-58579 (CVSS 5.3) — Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint…
    CVE-2025-58587 (CVSS 6.5) — The application does not implement sufficient measures to prevent multiple failed authentication attempts with…
    CVE-2025-58586 (CVSS 5.3) — For failed login attempts, the application returns different error messages depending on whether the login fai…
    CVE-2025-58584 (CVSS 5.3) — In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URL…
    CVE-2025-58583 (CVSS 5.3) — The application provides access to a login protected H2 database for caching purposes. The username…
    CVE-2025-58582 (CVSS 5.3) — If a user tries to login but the provided credentials are incorrect a log is created. The data for this POST r…
    CVE-2025-58581 (CVSS 4.3) — When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class…
    CVE-2025-58578 (CVSS 3.8) — A user with the appropriate authorization can create any number of user accounts via an API endpoint using …
    CVE-2025-49184 (CVSS 7.5) — A remote unauthorized attacker may gather sensitive information of the application, due to missing authorizati…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High