https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-46825.htmlhttps://patchthecve.com/cve/CVE-2021-46825.htmlWed, 17 Jun 2026 04:15:37 +0000CRITICAL 9.1: Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web servhttps://patchthecve.com/cve/CVE-2016-6594.htmlhttps://patchthecve.com/cve/CVE-2016-6594.htmlWed, 17 Jun 2026 00:51:25 +0000HIGH 7.5: Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers to bypass blocked requests, user authentication, and payload scanning.https://patchthecve.com/cve/CVE-2015-8597.htmlhttps://patchthecve.com/cve/CVE-2015-8597.htmlWed, 17 Jun 2026 00:34:49 +0000HIGH 7.4: Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway (ASG) 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as https://patchthecve.com/cve/CVE-2013-5959.htmlhttps://patchthecve.com/cve/CVE-2013-5959.htmlTue, 16 Jun 2026 23:59:48 +0000HIGH 7.1: Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of service (memory consumption and dropped connections) via a recursive href in an HTML page, which triggers a large number of HTTP RW pipeline pre-fetch requests.https://patchthecve.com/cve/CVE-2011-5124.htmlhttps://patchthecve.com/cve/CVE-2011-5124.htmlTue, 16 Jun 2026 23:35:59 +0000HIGH 10.0: Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp).https://patchthecve.com/cve/CVE-2010-5192.htmlhttps://patchthecve.com/cve/CVE-2010-5192.htmlTue, 16 Jun 2026 23:26:17 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2010-5190.htmlhttps://patchthecve.com/cve/CVE-2010-5190.htmlTue, 16 Jun 2026 23:26:17 +0000MEDIUM 5.0: The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1 allows remote attackers to bypass JavaScript detection via HTML entities.https://patchthecve.com/cve/CVE-2010-5189.htmlhttps://patchthecve.com/cve/CVE-2010-5189.htmlTue, 16 Jun 2026 23:26:17 +0000HIGH 9.3: Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authenticated users to execute arbitrary CLI commands by leveraging read-only administrator privileges and establishing an HTTPS session.