Vulnerabilities > Bluecoat > Sgos > Medium

DATE CVE VULNERABILITY TITLE RISK
2012-08-26 CVE-2011-5126 Information Exposure vulnerability in Bluecoat Sgos
Blue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, which allows context-dependent attackers to obtain sensitive authentication information by leveraging read access to a downloaded core file.
network
low complexity
bluecoat CWE-200
5.0
2012-08-26 CVE-2010-5192 Cross-Site Scripting vulnerability in Bluecoat products
Cross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
bluecoat CWE-79
4.3
2012-08-26 CVE-2010-5190 Permissions, Privileges, and Access Controls vulnerability in Bluecoat products
The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1 allows remote attackers to bypass JavaScript detection via HTML entities.
network
low complexity
bluecoat CWE-264
5.0