CVE-2025-58584: Sick Baggage Analytics

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally.

Affected products

• Sick Baggage Analytics: any version
• Sick Enterprise Analytics: any version
• Sick Logistic Diagnostic Analytics: any version
• Sick Package Analytics: any version
• Sick Tire Analytics: any version

Published 2025-10-06. Last modified 2026-06-17.