Approved changes feed: RSS · Atom

cpe:2.3:h:bluecoat:proxysg:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorBluecoat (f1fecdf9-77b6-50ef-a95c-e283dc1e2cf5)
ProductProxysg (86b955d0-3c2e-57c1-9d6b-ba1ad4984427)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-5192 vulnerable 2026-06-08 04:56:32.468783 Details available
Cross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-08-26T19:00:00.000Z
Updated: 2024-08-07T04:09:39.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5190 vulnerable 2026-06-08 04:56:32.461801 Details available
The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1 allows remote attackers to bypass JavaScript detection via HTML entities.
Published: 2012-08-26T19:00:00.000Z
Updated: 2024-09-16T22:41:25.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5189 vulnerable 2026-06-08 04:56:32.442915 Details available
Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authenticated users to execute arbitrary CLI commands by leveraging read-only administrator privileges and establishing an HTTPS session.
Published: 2012-08-26T19:00:00.000Z
Updated: 2024-09-17T03:07:04.023Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1211 vulnerable 2026-06-08 04:51:13.836142 Details available
Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
Published: 2009-04-01T10:00:00.000Z
Updated: 2024-09-17T04:09:14.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0112 vulnerable 2026-06-08 04:47:48.577854 Details available
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
Published: 2004-03-18T05:00:00.000Z
Updated: 2024-08-08T00:10:03.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0081 vulnerable 2026-06-08 04:47:48.458719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0079 vulnerable 2026-06-08 04:47:48.416558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.