Bluecoat Proxyav vulnerabilities

2 CVEs affecting Bluecoat Proxyav, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-5191, published 2012-08-26.

More from Bluecoat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-4085, published 2005-12-31. High severity, CVSS 7.5. EPSS: 65.9% chance of exploitation in the next 30 days. Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.
• CVE-2010-5191, published 2012-08-26. High severity, CVSS 9.3. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remote attackers to hijack the authentication of administrators for requests that…