CVEvulnerability
CVE-2007-5796
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-11-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists.
Affected configurations
• symantec proxysg firmware (< 4.2.6.1)
• symantec proxysg firmware (>= 5.0.0 < 5.2.2.5)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/27452 Third Party Advisory
- http://www.bluecoat.com/support/securityadvisories/advisory_cross-site_scripting_vulnerability Patch, Vendor Advisory
- http://www.securitytracker.com/id?1018888 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/3678 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38213 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/27452 Third Party Advisory
- http://www.bluecoat.com/support/securityadvisories/advisory_cross-site_scripting_vulnerability Patch, Vendor Advisory
- http://www.securitytracker.com/id?1018888 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/3678 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38213 Third Party Advisory, VDB Entry