5.3
CVE-2026-22645
- EPSS 0.05%
- Veröffentlicht 15.01.2026 13:14:38
- Zuletzt bearbeitet 29.01.2026 17:19:57
- Quelle psirt@sick.de
- CVE-Watchlists
- Unerledigt
LoginThe application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sick ≫ Incoming Goods Suite Version < 1.2.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.149 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| psirt@sick.de | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.