CVE-2025-58578

Low

Description

A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation.

SeverityLow

CVSS3.8

Exploit probability—

ProductSick Enterprise Analytics

PublishedOct 6, 2025

First seenOct 6, 2025

Weakness typeCWE-770Allocation of resources without limits

How to fix

Vendor advisories

sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf

Affected products

Product	Affected versions	Fixed in
sick enterprise_analytics	No range specified	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.