sick has 9 CVEs on record. The median CVSS is 5.3 (medium). None have a confirmed exploitation report. The most common weakness class is CWE-770 (3). Most affected products: enterprise_analytics (5), tloc100-100_firmware (4).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- enterprise_analytics 5
- tloc100-100_firmware 4
Worst active — by depth score
CVE-2025-59461High· 7.6A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services.42CVE-2025-59462Medium· 6.5An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.36CVE-2025-58580Medium· 6.5An API endpoint allows arbitrary log entries to be created via POST request36CVE-2025-59459Medium· 5.5An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.30CVE-2025-58583Medium· 5.3The application provides access to a login protected H2 database for caching purposes29
sick vulnerabilities
CVEs affecting sick, newest first. Open any entry for full detail, references, and exploit status.
9 CVEsRSS
CVE-2025-59463Medium· 4.3An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.
CVE-2025-59462Medium· 6.5An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.
CVE-2025-59461High· 7.6A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services.
A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services.
CVE-2025-59459Medium· 5.5An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.
An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.
CVE-2025-58583Medium· 5.3The application provides access to a login protected H2 database for caching purposes
The application provides access to a login protected H2 database for caching purposes. The username is prefilled.
CVE-2025-58582Medium· 5.3If a user tries to login but the provided credentials are incorrect a log is created
If a user tries to login but the provided credentials are incorrect a log is created. The data for this POST requests is not validated and it’s possible to send giant payloads which are then logged.
CVE-2025-58581Medium· 4.3When an error occurs in the application a full stacktrace is provided to the user
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker can thus obtain information about the technology used and …
CVE-2025-58580Medium· 6.5An API endpoint allows arbitrary log entries to be created via POST request
An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.
CVE-2025-58578Low· 3.8A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request
A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation.