Security Advisory

CVE-2025-11925

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-17 19:56:14

Last updated 2025-10-17 20:25:34

Assigner azure-access

CVSS score 10.0

State PUBLISHED

Description

Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/json`) replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

← Browse all CVEs View on cve.org ↗