Lucene search

K
cve[email protected]CVE-2010-5192
HistoryAug 26, 2012 - 7:55 p.m.

CVE-2010-5192

2012-08-2619:55:01
CWE-79
web.nvd.nist.gov
23
cve-2010-5192
xss
cross-site scripting
java management console
blue coat proxysg
sgos
remote attackers
web script
html
unspecified vectors

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

Cross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD
Node
bluecoatsgosRange4.3.4
OR
bluecoatsgosMatch3.2.6
OR
bluecoatsgosMatch4.1.2.1
OR
bluecoatsgosMatch4.2.1.2
OR
bluecoatsgosMatch4.2.1.6
OR
bluecoatsgosMatch4.2.2
OR
bluecoatsgosMatch4.2.2.1
OR
bluecoatsgosMatch4.2.2.2
OR
bluecoatsgosMatch4.2.3
OR
bluecoatsgosMatch4.2.3.4
OR
bluecoatsgosMatch4.2.3.7
OR
bluecoatsgosMatch4.2.3.12
OR
bluecoatsgosMatch4.2.3.21
OR
bluecoatsgosMatch4.2.3.26
OR
bluecoatsgosMatch4.2.4.1
OR
bluecoatsgosMatch4.2.5
OR
bluecoatsgosMatch4.2.5.1
OR
bluecoatsgosMatch4.2.6
OR
bluecoatsgosMatch4.2.6.1
OR
bluecoatsgosMatch4.2.6.4
OR
bluecoatsgosMatch4.2.7.1
OR
bluecoatsgosMatch5.2.2.4
OR
bluecoatsgosMatch5.4.5
OR
bluecoatsgosMatch5.5.4
OR
bluecoatsgosMatch6.1.2
AND
bluecoatproxysg
OR
bluecoatproxysg_sg210-10Match--acceleration
OR
bluecoatproxysg_sg210-10Match--full_proxy
OR
bluecoatproxysg_sg210-25Match--acceleration
OR
bluecoatproxysg_sg210-25Match--full_proxy
OR
bluecoatproxysg_sg210-5Match--acceleration
OR
bluecoatproxysg_sg210-5Match--full_proxy
OR
bluecoatproxysg_sg510-10Match--acceleration
OR
bluecoatproxysg_sg510-10Match--full_proxy
OR
bluecoatproxysg_sg510-20Match--acceleration
OR
bluecoatproxysg_sg510-20Match--full_proxy
OR
bluecoatproxysg_sg510-25Match--acceleration
OR
bluecoatproxysg_sg510-25Match--full_proxy
OR
bluecoatproxysg_sg510-5Match--full_proxy
OR
bluecoatproxysg_sg810-10Match--acceleration
OR
bluecoatproxysg_sg810-10Match--full_proxy
OR
bluecoatproxysg_sg810-20Match--acceleration
OR
bluecoatproxysg_sg810-20Match--full_proxy
OR
bluecoatproxysg_sg810-25Match--acceleration
OR
bluecoatproxysg_sg810-25Match--full_proxy
OR
bluecoatproxysg_sg810-5Match--full_proxy
OR
bluecoatproxysg_sg9000-10Match--acceleration
OR
bluecoatproxysg_sg9000-10Match--full_proxy
OR
bluecoatproxysg_sg9000-20Match--acceleration
OR
bluecoatproxysg_sg9000-20Match--full_proxy
OR
bluecoatproxysg_sg9000-5Match--acceleration
OR
bluecoatproxysg_sg9000-5Match--full_proxy

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

Related for CVE-2010-5192