CVE-2010-5191: Bluecoat Avos

High severity, CVSS 9.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password, (2) modify a policy, or (3) restart the device.

Affected products

• Bluecoat Avos: up to and including 3.2.6; version 3.1 only; version 3.2 only
• Bluecoat Proxyav

Published 2012-08-26. Last modified 2026-06-16.