CVEvulnerability

CVE-2002-1060

4.3 MEDIUM Published 2002-10-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-10-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that includes the HTML, which is inserted into the resulting error page.

Affected configurations

• bluecoat cacheos 3.1.17 • bluecoat cacheos 3.1.18 • bluecoat cacheos 3.1.19 • bluecoat cacheos 3.1.21 • bluecoat cacheos 4.0 • bluecoat cacheos 4.0.11 • bluecoat cacheos 4.0.12 • bluecoat cacheos 4.0.13 • bluecoat cacheos 4.0.14 • bluecoat cacheos 4.1.6

References