Cross site scripting

2007-11-0300:46:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.8%

JSON

Cross-site scripting (XSS) vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists.

CPENameOperatorVersion
proxysg_firmwarelt4.2.6.1
proxysg_firmwarege5.0.0
proxysg_firmwarelt5.2.2.5

Name	Operator	Version
proxysg_firmware	lt	4.2.6.1
proxysg_firmware	ge	5.0.0
proxysg_firmware	lt	5.2.2.5

References

secunia.com/advisories/27452

www.bluecoat.com/support/securityadvisories/advisory_cross-site_scripting_vulnerability

www.securitytracker.com/id?1018888

www.vupen.com/english/advisories/2007/3678

exchange.xforce.ibmcloud.com/vulnerabilities/38213