An issue was discovered in Cleo LexiCom 5.5.0.0. The requirement for the sender of an AS2 message to identify themselves (via encryption and signing of the message) can be bypassed by changing the Content-Type of the message to text/plain.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Cleo Lexicom | — | Update Cleo Lexicom to the latest version | Jun 9, 2025 | Jun 18, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub