Blue Coat's vulnerability profile centers on a narrow line of SSL inspection and visibility appliances designed for enterprise traffic monitoring and decryption, with recurring exposure in its SV-series firmware and device platforms. The durable signal across these products reflects web-application and configuration-layer weakness classes: sensitive-information disclosure, cross-site request forgery, input validation flaws, and cross-site scripting issues that are typical of appliance management interfaces and inspection logic. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Blue Coat over time
Signals from CVEs in this vendor scope (41 CVEs).
41 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-5124HIGH Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary cod | Aug 26, 2012 | 10.0 | 77 | NO | YES |
CVE-2005-4085HIGH Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a | Dec 31, 2005 | 7.5 | 72 | NO | YES |
CVE-2011-5127HIGH Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary fil | Aug 26, 2012 | 10.0 | 44 | NO | YES |
CVE-2007-1685HIGH Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service (crash) and po | Jun 8, 2007 | 10.0 | 43 | NO | YES |
CVE-2016-9091HIGH Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authent | Apr 5, 2017 | 7.2 | 32 | NO | YES |
CVE-2005-1709HIGH Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license. | May 24, 2005 | 7.5 | 29 | NO | YES |
CVE-2004-0079HIGH The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake t | Nov 23, 2004 | 7.5 | 29 | NO | NO |
CVE-2010-5191HIGH Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remote attackers to hijack the authentication of administrators f | Aug 26, 2012 | 9.3 | 27 | NO | NO |
CVE-2008-5121HIGH dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and | Nov 18, 2008 | 7.2 | 27 | NO | YES |
CVE-2007-0796HIGH Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long | Feb 6, 2007 | 7.5 | 27 | NO | NO |
Signals from CVEs in this vendor scope (41 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Blue Coat.
Media articles that mention a CVE ID that affects a product developed by Blue Coat — matched by CVE ID, not by vendor name.