CVE-2015-0938: search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remo

Q: How do I fix CVE-2015-0938?

malware analysis appliance: upgrade to newer than 4.2.3.20150129. Exact commands for each OS are on this page.

Q: Is CVE-2015-0938 being exploited?

CVE-2015-0938 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2015-0938 affect?

CVE-2015-0938 affects malware analysis appliance. Severity is medium (CVSS 5.0). search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass intended access restrictions, and list or read arbitrary documents, by providing matching keywords in conju

Q: How urgent is CVE-2015-0938?

Priority 36/100. No elevated risk signals yet.

Routine

MEDIUM 5.0UPGRADE

CVE-2015-0938 is a medium-severity flaw (CVSS 5.0) affecting malware analysis appliance. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass intended access restrictions, and list or read arbitrary documents, by providing matching keywords in conjunction with a crafted parameter.

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	5.0 (Medium)
EPSS exploit chance	1.4% (top 27%)
CISA exploited list	No
Weakness	CWE-200
Published	2015-04-17
Last modified	2026-06-17

Publisher (CNA): CERT/CC · Vendor: blue coat

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2015-04-17 01:59 UTCPublished CVE record published
2026-06-17 00:21 UTCUpdated Record last modified

blue coat malware analysis appliance UPGRADE

Affected: <= 4.2.3.20150129

Fixed in: newer than 4.2.3.20150129

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy malware-analysis-appliance || rpm -q malware-analysis-appliance || malware-analysis-appliance --version

2. UPGRADE to newer than 4.2.3.20150129 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade malware-analysis-appliance

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade malware-analysis-appliance

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2015-0938?

malware analysis appliance: upgrade to newer than 4.2.3.20150129. Exact commands for each OS are on this page.

Is CVE-2015-0938 being exploited?

CVE-2015-0938 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2015-0938 affect?

CVE-2015-0938 affects malware analysis appliance. Severity is medium (CVSS 5.0). search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass intended access restrictions, and list or read arbitrary documents, by providing matching keywords in conju

How urgent is CVE-2015-0938?

Priority 36/100. No elevated risk signals yet.

Software pages

PHP vulnerabilities

Related CVEs

CVE-2015-4523 CRITICAL 9.3 UPGRADE UPGRADE Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypa
CVE-2015-0937 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in search.php on the Blue Coat Malware Analysis appliance with softwa

References

← Back to latest CVEs