CVE-2025-65230

Medium · 5.4

CVSS

5.4

EPSS

0.2%

Published

Dec 8, 2025

CISA due date

—

The record

Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS) vulnerability in the Web UI Configuration Streaming Destination input.

Affected packages

Ecosystem	Package	Introduced	Fixed