Skip to content
OpenAdvisories
Critical · 10.0 CVE-2025-12001 EUVD-2025-35114GHSA-9p37-p7vc-233f

Incorrect Content-Type Header

Published Oct 20, 2025 · Updated Oct 26, 2025 · Assigned by azure-access

Description

Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Affected products

VendorProductAffectedFixed
Azure Access Technology BLU-IC2 ≤ 1.19.5 —
Azure Access Technology BLU-IC4 ≤ 1.19.5 —

References