bluecoat vulnerabilities

Recent CVEs affecting bluecoat products. 17 tracked.

bluecoat has 17 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2017-06-08. Highest priority: CVE-2011-5124 (score 65/100).

CVE-2016-9091 HIGH 7.2 UPGRADE UPGRADE Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.
CVE-2016-6594 HIGH 7.5 DOWNGRADE DOWNGRADE Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers to bypass bl
CVE-2016-10259 MEDIUM 5.9 MITIGATE MITIGATE Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to
CVE-2015-8597 HIGH 7.4 UPGRADE DOWNGRADE Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway (ASG)
CVE-2015-8482 LOW 2.1 UPGRADE Blue Coat Unified Agent before 4.6.2 does not prevent modification of its configuration files when running in
CVE-2015-1454 HIGH 7.1 UPGRADE UPGRADE Blue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10 and Unified Agent before 4.1.3.151952 does not
CVE-2014-2565 MEDIUM 6.5 UPGRADE MITIGATE The commandline interface in Blue Coat Content Analysis System (CAS) 1.1 before 1.1.4.2 allows remote administ
CVE-2014-2033 HIGH 7.9 UPGRADE The caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2 through 6.2.15
CVE-2013-5959 HIGH 7.1 DOWNGRADE UPGRADE Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denia
CVE-2011-5127 HIGH 10.0 DOWNGRADE Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 b
CVE-2011-5126 MEDIUM 5.0 MITIGATE Blue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, w
CVE-2011-5125 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to injec
CVE-2011-5124 HIGH 10.0 MITIGATE DOWNGRADE Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 thro
CVE-2010-5192 MEDIUM 4.3 UPGRADE MITIGATE Cross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4
CVE-2010-5191 HIGH 9.3 UPGRADE MITIGATE Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 a
CVE-2010-5190 MEDIUM 5.0 UPGRADE MITIGATE The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.
CVE-2010-5189 HIGH 9.3 UPGRADE MITIGATE Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6

FAQ

How do I fix bluecoat vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is bluecoat being exploited right now?

None of the tracked bluecoat CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which bluecoat CVE should I patch first?

CVE-2011-5124 currently ranks highest (65/100): Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 thro.

Products

RSS feed for bluecoat · ← Back to latest CVEs