PatchTheCVEsgos vulnerabilities and fixes
Recent CVEs affecting sgos, with upgrade or downgrade steps. 4 tracked.
sgos has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2012-08-26. Highest priority: CVE-2010-5189 (score 52/100).
- CVE-2011-5126 MEDIUM 5.0 MITIGATE Blue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, w
- CVE-2010-5192 MEDIUM 4.3 UPGRADE MITIGATE Cross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4
- CVE-2010-5190 MEDIUM 5.0 UPGRADE MITIGATE The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.
- CVE-2010-5189 HIGH 9.3 UPGRADE MITIGATE Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6
FAQ
How do I fix sgos vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sgos being exploited right now?
None of the tracked sgos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sgos CVE should I patch first?
CVE-2010-5189 currently ranks highest (52/100): Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.