Lucene search

[email protected]CVE-2010-5190

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-5190

2022-10-0316:21:02

CWE-264

[email protected]

web.nvd.nist.gov

cve-2010-5190

active content transformation

blue coat proxysg

sgos

javascript detection

html entities

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.1%

JSON

The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1 allows remote attackers to bypass JavaScript detection via HTML entities.

Affected configurations

NVD

Node

bluecoatsgosRange≤4.3.4

bluecoatsgosMatch3.2.6

bluecoatsgosMatch4.1.2.1

bluecoatsgosMatch4.2.1.2

bluecoatsgosMatch4.2.1.6

bluecoatsgosMatch4.2.2

bluecoatsgosMatch4.2.2.1

bluecoatsgosMatch4.2.2.2

bluecoatsgosMatch4.2.3

bluecoatsgosMatch4.2.3.4

bluecoatsgosMatch4.2.3.7

bluecoatsgosMatch4.2.3.12

bluecoatsgosMatch4.2.3.21

bluecoatsgosMatch4.2.3.26

bluecoatsgosMatch4.2.4.1

bluecoatsgosMatch4.2.5

bluecoatsgosMatch4.2.5.1

bluecoatsgosMatch4.2.6

bluecoatsgosMatch4.2.6.1

bluecoatsgosMatch4.2.6.4

bluecoatsgosMatch4.2.7.1

bluecoatsgosMatch5.2.2.4

bluecoatsgosMatch5.4.5

bluecoatsgosMatch5.5.4

bluecoatsgosMatch6.1.2

AND

bluecoatproxysg

bluecoatproxysg_sg210-10Match--acceleration

bluecoatproxysg_sg210-10Match--full_proxy

bluecoatproxysg_sg210-25Match--acceleration

bluecoatproxysg_sg210-25Match--full_proxy

bluecoatproxysg_sg210-5Match--acceleration

bluecoatproxysg_sg210-5Match--full_proxy

bluecoatproxysg_sg510-10Match--acceleration

bluecoatproxysg_sg510-10Match--full_proxy

bluecoatproxysg_sg510-20Match--acceleration

bluecoatproxysg_sg510-20Match--full_proxy

bluecoatproxysg_sg510-25Match--acceleration

bluecoatproxysg_sg510-25Match--full_proxy

bluecoatproxysg_sg510-5Match--full_proxy

bluecoatproxysg_sg810-10Match--acceleration

bluecoatproxysg_sg810-10Match--full_proxy

bluecoatproxysg_sg810-20Match--acceleration

bluecoatproxysg_sg810-20Match--full_proxy

bluecoatproxysg_sg810-25Match--acceleration

bluecoatproxysg_sg810-25Match--full_proxy

bluecoatproxysg_sg810-5Match--full_proxy

bluecoatproxysg_sg9000-10Match--acceleration

bluecoatproxysg_sg9000-10Match--full_proxy

bluecoatproxysg_sg9000-20Match--acceleration

bluecoatproxysg_sg9000-20Match--full_proxy

bluecoatproxysg_sg9000-5Match--acceleration

bluecoatproxysg_sg9000-5Match--full_proxy

CPENameOperatorVersion
bluecoat:sgosbluecoat sgosle4.3.4
bluecoat:sgosbluecoat sgoseq3.2.6
bluecoat:sgosbluecoat sgoseq4.1.2.1
bluecoat:sgosbluecoat sgoseq4.2.1.2
bluecoat:sgosbluecoat sgoseq4.2.1.6
bluecoat:sgosbluecoat sgoseq4.2.2
bluecoat:sgosbluecoat sgoseq4.2.2.1
bluecoat:sgosbluecoat sgoseq4.2.2.2
bluecoat:sgosbluecoat sgoseq4.2.3
bluecoat:sgosbluecoat sgoseq4.2.3.4

CPE	Name	Operator	Version
bluecoat:sgos	bluecoat sgos	le	4.3.4
bluecoat:sgos	bluecoat sgos	eq	3.2.6
bluecoat:sgos	bluecoat sgos	eq	4.1.2.1
bluecoat:sgos	bluecoat sgos	eq	4.2.1.2
bluecoat:sgos	bluecoat sgos	eq	4.2.1.6
bluecoat:sgos	bluecoat sgos	eq	4.2.2
bluecoat:sgos	bluecoat sgos	eq	4.2.2.1
bluecoat:sgos	bluecoat sgos	eq	4.2.2.2
bluecoat:sgos	bluecoat sgos	eq	4.2.3
bluecoat:sgos	bluecoat sgos	eq	4.2.3.4

Rows per page:

1-10 of 401

References

kb.bluecoat.com/index?page=content&id=SA48

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.1%

JSON

Related for CVE-2010-5190

cvelist1 prion1 nvd1