Skip to content
Noroxi

bluecoat records

33 published records for vendor bluecoat.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 6.1%
Pre-auth RCE
8
With a fix record
9.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

33 records
  • CVE-2011-5124
    56Plan

    Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows r

    CriticalCVSS 10.0WeaponizedEPSS 54%

    bluecoat · proxyoneAug 26, 2012

  • CVE-2005-4085
    50Plan

    Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote at

    HighCVSS 7.5WeaponizedEPSS 65%

    bluecoat · webproxyDec 31, 2005

  • CVE-2007-1685
    44Plan

    Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    bluecoat · k9 web protectionJun 8, 2007

  • CVE-2011-5127
    44Plan

    Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allow

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    bluecoat · reporterAug 26, 2012

  • CVE-2010-5189
    38Monitor

    Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authentic

    CriticalCVSS 9.3No exploitEPSS 1%

    bluecoat · sgosAug 26, 2012

  • CVE-2010-5191
    37Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remote attackers to hijac

    CriticalCVSS 9.3No exploitEPSS 1%

    bluecoat · avosAug 26, 2012

  • CVE-2007-0796
    34Monitor

    Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service (daemon crash) or po

    HighCVSS 7.5No exploitEPSS 12%

    bluecoat · winproxyFeb 6, 2007

  • CVE-2004-0079
    33Monitor

    The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (

    HighCVSS 7.5No exploitEPSS 9%

    openssl · opensslNov 23, 2004

  • CVE-2016-9091
    31Monitor

    Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS com

    HighCVSS 7.2Proof of conceptEPSS 9%

    bluecoat · advanced secure gatewayApr 5, 2017

  • CVE-2005-3654
    31Monitor

    Blue Coat Systems Inc.

    HighCVSS 7.5No exploitEPSS 3%

    bluecoat · webproxyDec 31, 2005

  • CVE-2005-1709
    31Monitor

    Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license.

    HighCVSS 7.5Proof of conceptEPSS 2%

    bluecoat · reporterMay 24, 2005

  • CVE-2006-0578
    31Monitor

    Blue Coat Proxy Security Gateway OS (SGOS) 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote at

    HighCVSS 7.5No exploitEPSS 1%

    bluecoat · sgosFeb 7, 2006

  • CVE-2014-2033
    31Monitor

    The caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2 through 6.2.15.3, 6.4 through 6.4.6.1, and 6

    HighCVSS 7.9No exploitEPSS 1%

    bluecoat · proxysgosMar 2, 2014

  • CVE-2015-8597
    30Monitor

    Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway (ASG) 6.6 might allow remote attacke

    HighCVSS 7.4No exploitEPSS 1%

    bluecoat · proxysgJan 8, 2016

  • CVE-2016-6594
    30Monitor

    Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers to bypass blocked requests, user authentic

    HighCVSS 7.5No exploitEPSS 1%

    bluecoat · advanced secure gatewayJun 8, 2017

  • CVE-2013-5959
    28Monitor

    Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of service (memory consumpti

    HighCVSS 7.1No exploitEPSS 1%

    bluecoat · proxysgosSep 28, 2013

  • CVE-2008-5121
    28Monitor

    dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat W

    HighCVSS 7.2Proof of conceptEPSS 1%

    citrix · deterministic network enhancerNov 17, 2008

  • CVE-2015-1454
    28Monitor

    Blue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10 and Unified Agent before 4.1.3.151952 does not properly validate certain cert

    HighCVSS 7.1No exploitEPSS 0%

    bluecoat · proxyclientFeb 2, 2015

  • CVE-2014-2565
    26Monitor

    The commandline interface in Blue Coat Content Analysis System (CAS) 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary co

    MediumCVSS 6.5No exploitEPSS 0%

    bluecoat · content analysis system softwareApr 30, 2014

  • CVE-2004-0112
    23Monitor

    The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of

    MediumCVSS 5.0No exploitEPSS 10%

    openssl · opensslNov 23, 2004

  • CVE-2016-10259
    23Monitor

    Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerabil

    MediumCVSS 5.9No exploitEPSS 1%

    bluecoat · ssl visibility appliance sv1800 firmwareApr 11, 2017

  • CVE-2009-1211
    23Monitor

    Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows r

    MediumCVSS 5.8No exploitEPSS 1%

    bluecoat · proxysg va-10Apr 1, 2009

  • CVE-2004-0081
    22Monitor

    OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infi

    MediumCVSS 5.0No exploitEPSS 7%

    openssl · opensslNov 23, 2004

  • CVE-2005-3187
    22Monitor

    The listening daemon in Blue Coat Systems Inc.

    MediumCVSS 5.0Proof of conceptEPSS 6%

    bluecoat · winproxyDec 31, 2005

  • CVE-2010-5190
    20Monitor

    The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1,

    MediumCVSS 5.0No exploitEPSS 1%

    bluecoat · sgosAug 26, 2012