SA111 : OpenSSL Vulnerabilities 28-Jan-2016

SUMMARY Blue Coat products using affected versions of OpenSSL 1.0.2, 1.0.1, and 0.9.8 are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to obtain ephemeral Diffie-Hellman DHE private key information and perform man-in-the-middle attacks on SSL/TLS...

SA110 : Java Deserialization Vulnerabilities

SUMMARY Blue Coat products that deserialize unsafe Java objects from untrusted sources are susceptible to one or more vulnerabilities. A remote attacker can exploit these vulnerabilities to cause the target to execute arbitrary code. AFFECTED PRODUCTS Cloud Data Protection for Salesforce CDP-SFDC...

Blue Coat Systems ProxySG and Advanced Secure Gateway Open Redirect Vulnerability

Blue Coat Systems ProxySG and Advanced Secure Gateway are both secure Web gateway appliances from Blue Coat Systems, USA. An open redirection vulnerability exists in Blue Coat Systems ProxySG and ASG. A remote attacker can exploit this vulnerability by using base64-encoded URLs and plaintext URLs...

CVE-2015-8597

Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway ASG 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as...

CVE-2015-8597

Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway ASG 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as...

XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability (Update C)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-15-342-01B XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability that was published March 21, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update C Part 1 of 2 -------- Independent researchers Karn...

XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-15-342-01B XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability that was published March 21, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update C Part 1 of 2 -------- Independent researchers Karn...

Fortinet FortiOS Input Validation Vulnerability

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A security...

SA100 : Apache Tomcat Vulnerabilities

SUMMARY Blue Coat products using affected versions of Tomcat 8.x, 7.x, and 6.x are susceptible to multiple vulnerabilities. A remote attacker may exploit these vulnerabilities to gain unauthorized read access or escalated privileges, or to conduct denial of service, HTTP request smuggling, or...

CVE-2014-2844

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

Cross site scripting

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

CVE-2014-2844

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

CVE-2014-2844

CVE-2014-2844 describes a reflected XSS in F-Secure Messaging Secure Gateway 7.5.0 prior to patch 1862. The issue results from the SysUser module’s new parameter allowing an authenticated admin to inject arbitrary web script/HTML when processing input, enabling potential cookie access or session ...

Citrix Secure Gateway Unspecified DoS

The version of Citrix Secure Gateway running on the remote host has an unspecified denial of service vulnerability. Making a specially crafted request can result in 100% CPU utilization, causing the application to become unresponsive. A remote attacker could exploit this by sending a malicious...

Citrix Secure Gateway Installed

Citrix Secure Gateway is installed on the remote host. This application provides a secure gateway between Citrix XenApp and client devices. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52545; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

Citrix Secure Gateway Unspecified Remote Code Execution

The version of Citrix Secure Gateway running on the remote host has an unspecified code execution vulnerability. This could reportedly allow a remote attacker to execute arbitrary code in the context of the Secure Gateway process. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

CVE-2009-2214

The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service CPU consumption via an unspecified request...

CVE-2009-2214

The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service CPU consumption via an unspecified request...

Design/Logic Flaw

The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service CPU consumption via an unspecified request...

CVE-2009-2214

The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service CPU consumption via an unspecified request...