Bluecoat operates a focused line of security appliances and proxy products, particularly its ProxySG family, that sit inline at network gateways to inspect and control web traffic for enterprises. The vendor's vulnerability disclosures cluster around web-facing input handling and command-injection weaknesses—including cross-site scripting, OS command injection, and buffer-boundary flaws—that are endemic to gateway inspection logic processing untrusted traffic. While the product portfolio is narrow, it occupies a prominent position in network security infrastructure and the vendor's disclosures frequently acquire public exploit tooling. Defenders should prioritize patches for this vendor's appliances given their privileged position in the request path and the availability of attack code; current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Bluecoat over time
Signals from CVEs in this vendor scope (41 CVEs).
41 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-5124HIGH Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary cod | Aug 26, 2012 | 10.0 | 77 | NO | YES |
CVE-2005-4085HIGH Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a | Dec 31, 2005 | 7.5 | 72 | NO | YES |
CVE-2011-5127HIGH Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary fil | Aug 26, 2012 | 10.0 | 44 | NO | YES |
CVE-2007-1685HIGH Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service (crash) and po | Jun 8, 2007 | 10.0 | 43 | NO | YES |
CVE-2016-9091HIGH Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authent | Apr 5, 2017 | 7.2 | 32 | NO | YES |
CVE-2005-1709HIGH Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license. | May 24, 2005 | 7.5 | 29 | NO | YES |
CVE-2004-0079HIGH The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake t | Nov 23, 2004 | 7.5 | 29 | NO | NO |
CVE-2010-5191HIGH Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remote attackers to hijack the authentication of administrators f | Aug 26, 2012 | 9.3 | 27 | NO | NO |
CVE-2008-5121HIGH dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and | Nov 18, 2008 | 7.2 | 27 | NO | YES |
CVE-2007-0796HIGH Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long | Feb 6, 2007 | 7.5 | 27 | NO | NO |
Signals from CVEs in this vendor scope (41 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Bluecoat.
Media articles that mention a CVE ID that affects a product developed by Bluecoat — matched by CVE ID, not by vendor name.