Vulnerabilities

TI-2025-40300 CVE-2025-65231 · GHSA-7vpr-g4pp-5q85

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the…

MEDIUM 60

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00225 Published 2025-12-08 No fix listed CWE-79

TI-2025-40299 CVE-2025-65230 · GHSA-78rm-h4fw-vj3f

Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS)…

MEDIUM 58

Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS) vulnerability in the Web UI Configuration Streaming Destination input.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00201 Published 2025-12-08 No fix listed CWE-79

TI-2024-27760 CVE-2024-41700 · GHSA-g467-xxq2-x845

Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

MEDIUM 40

Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00836 Published 2024-08-20 Fixed in Upgrade to a newer version, or limit access to management port CWE-200

Vulnerabilities

Filters

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the…

Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS)…

Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor