10
/ 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Description
Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
AI Analysis
Potential stored XSS due to lack of application manifest sanitation
Basic Information
ID
CVE-2025-12001
Source
azure-access
Published
Oct 20, 2025 at 21:53
Affected Product
Vendor
Azure Access Technology
Product
BLU-IC2
Affected Versions
Azure Access Technology BLU-IC2 0
Azure Access Technology BLU-IC4 0
Azure Access Technology BLU-IC4 0
CWE Classification
AI Assessment
AI Score
10 / 10
AI Severity
Critical
Vendor
Azure Access Technology
Product
BLU-IC2, BLU-IC4
Version
through 1.19.5