Bluecoat vulnerabilities
32 vulnerabilities
Known vulnerabilities in Bluecoat products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 42 products.
Products
42- Sgos5 vulnerabilities
- Proxysg4 vulnerabilities
- Proxysg Sg210 104 vulnerabilities
- Proxysg Sg210 254 vulnerabilities
- Proxysg Sg210 54 vulnerabilities
- Proxysg Sg510 104 vulnerabilities
- Proxysg Sg510 204 vulnerabilities
- Proxysg Sg510 254 vulnerabilities
- Proxysg Sg510 54 vulnerabilities
- Proxysg Sg810 104 vulnerabilities
- Proxysg Sg810 204 vulnerabilities
- Proxysg Sg810 254 vulnerabilities
- Proxysg Sg810 54 vulnerabilities
- Proxysg Sg9000 104 vulnerabilities
- Proxysg Sg9000 204 vulnerabilities
- Proxysg Sg9000 54 vulnerabilities
- Reporter4 vulnerabilities
- Advanced Secure Gateway3 vulnerabilities
- Cacheos Ca Sa3 vulnerabilities
- Content Analysis System Software2 vulnerabilities
- Proxysgos2 vulnerabilities
- Unified Agent2 vulnerabilities
- Webproxy2 vulnerabilities
- Winproxy2 vulnerabilities
- Avos1 vulnerabilities
- Cacheflow1 vulnerabilities
- Cacheos1 vulnerabilities
- Content Analysis System1 vulnerabilities
- Director1 vulnerabilities
- K9 Web Protection1 vulnerabilities
- Proxyclient1 vulnerabilities
- Security Gateway Os1 vulnerabilities
- Ssl Visibility Appliance Sv18001 vulnerabilities
- Ssl Visibility Appliance Sv28001 vulnerabilities
- Ssl Visibility Appliance Sv38001 vulnerabilities
- Ssl Visibility Appliance Sv8001 vulnerabilities
- Proxyav0 vulnerabilities
- Proxyone0 vulnerabilities
- Proxysg Va 100 vulnerabilities
- Proxysg Va 150 vulnerabilities
- Proxysg Va 200 vulnerabilities
- Proxysg Va 50 vulnerabilities
CVE-2013-5959bluecoatproxysg+1
EPSS score1.55%
Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of service (memory consumption and dropped connections) via a recursive href in an HTML page, which triggers a large number of HTTP RW pipeline pre-fetch requests.CVE-2015-1454bluecoatproxyclient+1EPSS score0.70%
Blue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10 and Unified Agent before 4.1.3.151952 does not properly validate certain certificates, which allows man-in-the-middle attackers to spoof ProxySG Client Managers, and consequently modify configurations and execute arbitrary software updates, via a crafted certificate.CVE-2015-8482bluecoatunified_agentEPSS score0.31%
Blue Coat Unified Agent before 4.6.2 does not prevent modification of its configuration files when running in local enforcement mode, which allows local administrators to unblock categories or disable the agent via unspecified vectors.CVE-2015-8597bluecoatadvanced_secure_gateway+1EPSS score1.92%
Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway (ASG) 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as demonstrated by "http://www.%humbug-URL%.local/bluecoat-splash-API?%BASE64-URL%."CVE-2007-1685bluecoatk9_web_protectionEPSS score13.52%
Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 2372.CVE-2007-0796bluecoatwinproxyEPSS score12.73%
Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long HTTP CONNECT request, which triggers heap corruption.CVE-2016-9091bluecoatadvanced_secure_gateway+3EPSS score9.58%
Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges.CVE-2016-10259bluecoatssl_visibility_appliance_sv1800_firmware+4EPSS score1.45%
Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerability that impacts the SSL servers for intercepted SSL connections. A malicious SSL client can, under certain circumstances, temporarily exhaust the TCP connection pool of an SSL server.CVE-2016-6594bluecoatadvanced_secure_gateway+2EPSS score1.30%
Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers to bypass blocked requests, user authentication, and payload scanning.CVE-2014-2033bluecoatproxysgosEPSS score1.04%
The caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2 through 6.2.15.3, 6.4 through 6.4.6.1, and 6.3 and 6.5 before 6.5.4 allows remote authenticated users to bypass intended access restrictions during a time window after account deletion or modification by leveraging knowledge of previously valid credentials.CVE-2014-2565bluecoatcontent_analysis_system+1EPSS score0.72%
The commandline interface in Blue Coat Content Analysis System (CAS) 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to "command injection."CVE-2005-1708bluecoatreporterEPSS score1.17%
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.CVE-2005-1709bluecoatreporterEPSS score2.79%
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license.CVE-2005-1710bluecoatreporterEPSS score1.30%
Multiple cross-site scripting (XSS) vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the username in an Add User window or (2) the license key (volatile.license_to_add parameter) in the Licensing page.CVE-2005-4085bluecoatwebproxyEPSS score65.92%
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.CVE-2005-3187bluecoatwinproxyEPSS score6.99%
The listening daemon in Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) via a long HTTP request that causes an out-of-bounds read.CVE-2005-3654bluecoatwebproxyEPSS score3.31%
Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap.CVE-2008-4485bluecoatsecurity_gateway_osEPSS score1.53%
Cross-site scripting (XSS) vulnerability in the ICAP patience page in Blue Coat Security Gateway OS (SGOS) 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7 allows remote attackers to inject arbitrary web script or HTML via the URL.CVE-2011-5125bluecoatdirectorEPSS score0.94%
Cross-site scripting (XSS) vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving the HTTP TRACE method.CVE-2011-5124bluecoatproxysgEPSS score54.65%
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp).