Technology · Azure-Access
Azure-Access Blu-Ic4 vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 37 vulnerabilities in Azure-Access Blu-Ic4: 0 in the last 7 days and 0 in the last 90 days, 23 of them critical and 0 exploited in the wild. The most recent, CVE-2025-12603, was published on 1 November 2025.
- Last 7 days
- 0
- Last 90 days
- 0
- Critical, all time
- 23
- Exploited in the wild
- 0
Latest Azure-Access Blu-Ic4 vulnerabilities
- CVE-2025-12603: /etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.criticalCVSS 9.8EPSS 0.3%
- CVE-2025-12602: /etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through…criticalCVSS 9.8EPSS 0.3%
- CVE-2025-12601: Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.highCVSS 7.5EPSS 0.3%
- CVE-2025-12600: Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through…criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12599: Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5…criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12554: Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12553: Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.criticalCVSS 9.8EPSS 0.2%
- CVE-2025-12552: Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.criticalCVSS 9.8EPSS 0.3%
- CVE-2025-12517: Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through…mediumCVSS 5.3EPSS 0.2%
- CVE-2025-12516: Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12515: Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12479: Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5…highCVSS 8.8EPSS 0.2%
- CVE-2025-12478: Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .criticalCVSS 9.8EPSS 0.2%
- CVE-2025-12477: Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12476: Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .criticalCVSS 9.8EPSS 0.3%
- CVE-2025-12425: Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .highCVSS 7.8EPSS 0.2%
- CVE-2025-12424: Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .criticalCVSS 9.8EPSS 0.3%
- CVE-2025-12423: Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .highCVSS 7.5EPSS 0.3%
- CVE-2025-12422: Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue…criticalCVSS 9.8EPSS 0.5%
- CVE-2025-12365: Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.mediumCVSS 5.3EPSS 0.3%
- CVE-2025-12364: Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.criticalCVSS 9.8EPSS 0.3%
- CVE-2025-12363: Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.highCVSS 7.5EPSS 0.3%
- CVE-2025-12285: Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.criticalCVSS 9.8EPSS 0.3%
- CVE-2025-12284: Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through…mediumCVSS 6.1EPSS 0.2%
- CVE-2025-12278: Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.mediumCVSS 6.5EPSS 0.2%
Most severe Azure-Access Blu-Ic4 vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2025-12275: Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through…criticalCVSS 9.8EPSS 0.5%
- CVE-2025-12422: Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue…criticalCVSS 9.8EPSS 0.5%
- CVE-2025-12599: Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5…criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12104: Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through…criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12600: Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through…criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12554: Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12516: Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12515: Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12220: Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.criticalCVSS 9.8EPSS 0.4%
- CVE-2025-12219: Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.criticalCVSS 9.8EPSS 0.4%
Vulnerabilities per week
Nothing was published in the last eight weeks. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Azure-Access Blu-Ic4 vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/blu-ic4)<a href="https://junglewise.ai/threats/technologies/blu-ic4"><img src="https://junglewise.ai/threats/technologies/blu-ic4/badge.svg" alt="Azure-Access Blu-Ic4 vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/blu-ic4.json, and this page as text at https://junglewise.ai/threats/technologies/blu-ic4.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Azure-Access Blu-Ic4 vulnerabilities", https://junglewise.ai/threats/technologies/blu-ic4, 9 November 2026.