Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Azure Access Technology — Vulnerabilities & Security Advisories 39

Browse all 39 CVE security advisories affecting Azure Access Technology. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Azure Access Technology serves as a critical component within Microsoft’s cloud infrastructure, primarily facilitating identity management and secure access controls for enterprise environments. Despite its foundational role, the software has accumulated 39 recorded Common Vulnerabilities and Exposures, highlighting persistent security challenges. Historically, the most prevalent vulnerability classes include remote code execution and cross-site scripting, which often stem from insufficient input validation and improper access control mechanisms. These flaws have occasionally allowed attackers to escalate privileges or bypass authentication protocols, compromising system integrity. While specific major incidents remain largely contained within internal audits or limited scope disclosures, the high volume of CVEs indicates systemic issues in legacy code handling. Security teams must prioritize rigorous patching and continuous monitoring to mitigate risks associated with these recurring architectural weaknesses in the access management layer.

Top products by Azure Access Technology: BLU-IC2
CVE ID Title CVSS Severity Published
CVE-2025-12603 /etc/timezone can be Arbitrarily Written — BLU-IC2 CWE-787 7.1 - 2025-11-01
CVE-2025-12602 /etc/avahi/services/z9.service can be Arbitrarily Written — BLU-IC2 CWE-787 8.8 - 2025-11-01
CVE-2025-12601 Denial of Service Due to SlowLoris — BLU-IC2 CWE-730 7.5 - 2025-11-01
CVE-2025-12600 Web UI Malfunction — BLU-IC2 CWE-730 6.5 - 2025-11-01
CVE-2025-12599 Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000) — BLU-IC2 CWE-321 7.5 - 2025-11-01
CVE-2025-12554 Missing Security Headers — BLU-IC2 CWE-693 - - 2025-10-31
CVE-2025-12553 Server Certificate Verification Disabled — BLU-IC2 CWE-599 7.5 - 2025-10-31
CVE-2025-12552 Insufficient Password Policy — BLU-IC2 CWE-521 9.8 - 2025-10-31
CVE-2025-12517 Credits Page not Matching Versions in Use in the Firmware — BLU-IC2 CWE-448 5.4AI Medium AI 2025-10-30
CVE-2025-12516 Lack of Graceful Error Handling - HTTP 5xx Error — BLU-IC2 CWE-394 5.3AI Medium AI 2025-10-30
CVE-2025-12515 Systemic Internal Server Errors - HTTP 500 Response — BLU-IC2 CWE-394 6.5AI Medium AI 2025-10-30
CVE-2025-12479 Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation — BLU-IC2 CWE-352 8.1AI High AI 2025-10-29
CVE-2025-12478 Non-Compliant TLS Configuration — BLU-IC2 CWE-326 9.1AI Critical AI 2025-10-29
CVE-2025-12477 Server Version Disclosure — BLU-IC2 CWE-306 4.3AI Medium AI 2025-10-29
CVE-2025-12476 Resource Lacking AuthN — BLU-IC2 CWE-306 9.1AI Critical AI 2025-10-29
CVE-2025-12425 Local Privilege Escalation — BLU-IC2 CWE-269 7.8AI High AI 2025-10-28
CVE-2025-12424 Privilege Escalation through SUID-bit Binary — BLU-IC2 CWE-269 7.8AI High AI 2025-10-28
CVE-2025-12423 Denial of Service - Protocol Manipulation — BLU-IC2 CWE-248 7.5AI High AI 2025-10-28
CVE-2025-12422 Vulnerable Upgrade Feature (Arbitrary File Write) — BLU-IC2 CWE-22 8.8AI High AI 2025-10-28
CVE-2025-12365 Error Messages Wrapped In HTTP Header — BLU-IC2 CWE-209 6.5AI Medium AI 2025-10-27
CVE-2025-12364 Weak Password Policy — BLU-IC2 CWE-521 9.8AI Critical AI 2025-10-27
CVE-2025-12363 Email Password Disclosure — BLU-IC2 CWE-200 6.5AI Medium AI 2025-10-27
CVE-2025-12285 Missing Initial Password Change — BLU-IC2 CWE-20 9.8 - 2025-10-26
CVE-2025-12284 Lack of Input Validation — BLU-IC2 CWE-20 9.4 - 2025-10-26
CVE-2025-12275 Mail Configuration File Manipulation + Command Execution — BLU-IC2 CWE-20 8.8 - 2025-10-26
CVE-2025-12278 Logout Functionality not Working — BLU-IC2 CWE-20 6.5 - 2025-10-26
CVE-2025-12221 CSRF Token not Properly Implemented — BLU-IC2 CWE-16 9.8 - 2025-10-25
CVE-2025-12220 Busybox 1.31.1 - Multiple Known Vulnerabilities — BLU-IC2 CWE-1395 9.8 - 2025-10-25
CVE-2025-12219 Vulnerable Components in Azure Access OS — BLU-IC2 CWE-1395 8.8 - 2025-10-25
CVE-2025-12218 Weak Default Credentials — BLU-IC2 CWE-1392 9.4 - 2025-10-25

This page lists every published CVE security advisory associated with Azure Access Technology. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.