PatchTheCVEblue coat vulnerabilities
Recent CVEs affecting blue coat products. 8 tracked.
blue coat has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2016-07-12. Highest priority: CVE-2016-5774 (score 50/100).
- CVE-2016-5774 HIGH 8.1 DOWNGRADE The HTTPS server in Blue Coat PacketShaper S-Series 11.5.x before 11.5.3.2 might allow remote attackers to obt
- CVE-2015-4138 MEDIUM 4.3 UPGRADE UPGRADE The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.
- CVE-2015-2855 MEDIUM 4.3 UPGRADE UPGRADE The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.
- CVE-2015-2854 MEDIUM 4.3 UPGRADE UPGRADE The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.
- CVE-2015-2853 MEDIUM 6.8 UPGRADE UPGRADE Session fixation vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2
- CVE-2015-2852 MEDIUM 4.3 UPGRADE UPGRADE Cross-site request forgery (CSRF) vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance S
- CVE-2015-0938 MEDIUM 5.0 UPGRADE search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remo
- CVE-2015-0937 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in search.php on the Blue Coat Malware Analysis appliance with softwa
FAQ
How do I fix blue coat vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is blue coat being exploited right now?
None of the tracked blue coat CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which blue coat CVE should I patch first?
CVE-2016-5774 currently ranks highest (50/100): The HTTPS server in Blue Coat PacketShaper S-Series 11.5.x before 11.5.3.2 might allow remote attackers to obt.