PatchTheCVEfield analytics vulnerabilities and fixes
Recent CVEs affecting field analytics, with upgrade or downgrade steps. 12 tracked.
Also searched as: fieldanalytics.
field analytics has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-06-12. Highest priority: CVE-2025-49184 (score 42/100).
- CVE-2025-49200 MEDIUM 6.5 MITIGATE The created backup files are unencrypted, making the application vulnerable for gathering sensitive informatio
- CVE-2025-49199 HIGH 8.8 MITIGATE The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a
- CVE-2025-49196 MEDIUM 6.5 MITIGATE A service supports the use of a deprecated and unsafe TLS version
- CVE-2025-49193 MEDIUM 4.2 MITIGATE MITIGATE The application fails to implement several security headers
- CVE-2025-49192 MEDIUM 4.3 MITIGATE UPGRADE The web application is vulnerable to clickjacking attacks
- CVE-2025-49191 MEDIUM 4.8 MITIGATE Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution
- CVE-2025-49190 MEDIUM 4.3 MITIGATE The application is vulnerable to Server-Side Request Forgery (SSRF)
- CVE-2025-49188 MEDIUM 5.3 MITIGATE The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to infor
- CVE-2025-49187 MEDIUM 5.3 MITIGATE For failed login attempts, the application returns different error messages depending on whether the login fai
- CVE-2025-49186 MEDIUM 5.3 MITIGATE MITIGATE The product does not implement sufficient measures to prevent multiple failed authentication attempts within a
- CVE-2025-49185 MEDIUM 5.5 MITIGATE The web application is susceptible to cross-site-scripting attacks
- CVE-2025-49184 HIGH 7.5 MITIGATE MITIGATE A remote unauthorized attacker may gather sensitive information of the application, due to missing authorizati
FAQ
How do I fix field analytics vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is field analytics being exploited right now?
None of the tracked field analytics CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which field analytics CVE should I patch first?
CVE-2025-49184 currently ranks highest (42/100): A remote unauthorized attacker may gather sensitive information of the application, due to missing authorizati.