CVE-2012-2565: Bloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash, which makes it...

Security readout for executives and security teams

Bloxx Web Filtering versions before 5.0.14 stored password hashes without a salt. If an attacker obtained those hashes, common passwords could be recovered more easily using precomputed rainbow-table techniques. The business risk is credential compromise, especially if passwords were reused elsewhere. Exposure appears limited to organizations running Bloxx Web Filtering before 5.0.14. The provided affected-product metadata is incomplete, so asset owners should verify product name, deployed version, and whether password hashes were accessible through backups, exports, or administrative compromise. Treat this as a credential-risk cleanup item, not an emergency based on the provided evidence. Prioritize confirming whether the legacy product exists, upgrading if present, and rotating potentially exposed passwords because recovered credentials can create broader business impact. Mitigation focus: Identify any Bloxx Web Filtering deployments and confirm exact version.; Upgrade systems running versions before 5.0.14, following vendor guidance.; Rotate affected local passwords after remediation if hash exposure is plausible..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.