Sick Media Server vulnerabilities

• sick media server Poor quality of randomness in authorization tokens CVE-2025-49198 3.1 LowJune 12, 2025
• sick media server Deprecated TLS version supported CVE-2025-49197 6.5 MediumJune 12, 2025
• sick media server No protection against brute-force attacks CVE-2025-49195 5.3 MediumJune 12, 2025
• sick media server Unencrypted communication CVE-2025-49194 7.5 HighJune 12, 2025
• plex media server, sick baggage analytics, field analytics +3 more +5 more Missing HTTP Security Headers CVE-2025-49193 4.2 MediumJune 12, 2025
• sick field analytics, media server +1 more Clickjacking CVE-2025-49192 4.3 MediumJune 12, 2025
• sick media server Cookie missing HttpOnly flag CVE-2025-49189 5.3 MediumJune 12, 2025
• sick media server Unencrypted communication (HTTP) CVE-2025-49183 7.5 HighJune 12, 2025
• sick media server Credential disclosure CVE-2025-49182 7.5 HighJune 12, 2025
• sick media server Configurations endpoint does not require authorization CVE-2025-49181 8.6 HighJune 12, 2025