PatchTheCVEenterprise analytics vulnerabilities and fixes
Recent CVEs affecting enterprise analytics, with upgrade or downgrade steps. 10 tracked.
Also searched as: enterpriseanalytics.
enterprise analytics has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-10-06. Highest priority: CVE-2025-49184 (score 42/100).
- CVE-2025-58587 MEDIUM 6.5 MITIGATE MITIGATE The application does not implement sufficient measures to prevent multiple failed authentication attempts with
- CVE-2025-58579 MEDIUM 5.3 MITIGATE MITIGATE Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint
- CVE-2025-58584 MEDIUM 5.3 MITIGATE MITIGATE In the HTTP request, the username and password are transferred directly in the URL as parameters
- CVE-2025-58586 MEDIUM 5.3 MITIGATE MITIGATE For failed login attempts, the application returns different error messages depending on whether the login fai
- CVE-2025-58580 MEDIUM 6.5 MITIGATE An API endpoint allows arbitrary log entries to be created via POST request
- CVE-2025-58582 MEDIUM 5.3 MITIGATE If a user tries to login but the provided credentials are incorrect a log is created
- CVE-2025-58583 MEDIUM 5.3 MITIGATE The application provides access to a login protected H2 database for caching purposes
- CVE-2025-58581 MEDIUM 4.3 MITIGATE When an error occurs in the application a full stacktrace is provided to the user
- CVE-2025-58578 LOW 3.8 MITIGATE A user with the appropriate authorization can create any number of user accounts via an API endpoint using
- CVE-2025-49184 HIGH 7.5 MITIGATE MITIGATE A remote unauthorized attacker may gather sensitive information of the application, due to missing authorizati
FAQ
How do I fix enterprise analytics vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is enterprise analytics being exploited right now?
None of the tracked enterprise analytics CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which enterprise analytics CVE should I patch first?
CVE-2025-49184 currently ranks highest (42/100): A remote unauthorized attacker may gather sensitive information of the application, due to missing authorizati.