<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: malware analysis appliance</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2015-4523: Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypa</title><link>https://patchthecve.com/cve/CVE-2015-4523.html</link><guid>https://patchthecve.com/cve/CVE-2015-4523.html</guid><pubDate>Wed, 17 Jun 2026 00:27:29 +0000</pubDate><description>CRITICAL 9.3: Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vecto</description></item><item><title>CVE-2015-0938: search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remo</title><link>https://patchthecve.com/cve/CVE-2015-0938.html</link><guid>https://patchthecve.com/cve/CVE-2015-0938.html</guid><pubDate>Wed, 17 Jun 2026 00:21:10 +0000</pubDate><description>MEDIUM 5.0: search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass intended access restrictions, and list or read arbitrary documents, by providing matching keywords in conjunction with a crafted parameter.</description></item><item><title>CVE-2015-0937: Cross-site scripting (XSS) vulnerability in search.php on the Blue Coat Malware Analysis appliance with softwa</title><link>https://patchthecve.com/cve/CVE-2015-0937.html</link><guid>https://patchthecve.com/cve/CVE-2015-0937.html</guid><pubDate>Wed, 17 Jun 2026 00:21:10 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</description></item></channel></rss>