CVE-2025-12278CWE-20CWE-613

CVE-2025-12278

Medium · published October 26, 2025

CVSS v3.1

6.5

EPSS

Percentile

9.8

In the wild

Unconfirmed

What it is

Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

The record

Technical detail

CVSS v3.1: 6.5 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.00203 · 9.8th percentile
Weaknesses: CWE-20 · Improper Input Validation; CWE-613 · Insufficient Session Expiration
Published: 2025-10-26T21:15Z

Affected products (2)

Product	Versions	Fixed in
azure-access/blu-ic2_firmware	< 1.20	1.20
azure-access/blu-ic4_firmware	< 1.20	1.20

References (1)

EPSS history

Timeline