CVE-2025-12553

CRITICAL

Server Certificate Verification Disabled

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-12553 has a selected CVSS score of 10.0 (critical).

Description

Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 31, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

BLU-IC2

Browse Azure Access Technology / BLU-IC2

Default status: unaffected

CVE ListThrough 1.19.5affected

BLU-IC4

Browse Azure Access Technology / BLU-IC4

Default status: unaffected

CVE ListThrough 1.19.5affected

References

2