CVEvulnerability
CVE-2008-4485
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-10-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the ICAP patience page in Blue Coat Security Gateway OS (SGOS) 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7 allows remote attackers to inject arbitrary web script or HTML via the URL.
Affected configurations
• bluecoat security gateway os 4.2
• bluecoat security gateway os 5.2
• bluecoat security gateway os 5.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=bugtraq&m=122210321731789&w=2 marc.info
- http://marc.info/?l=bugtraq&m=122298544725313&w=2 marc.info
- http://secunia.com/advisories/32122 Vendor Advisory
- http://securityreason.com/securityalert/4367 securityreason.com
- http://www.bluecoat.com/support/securityadvisories/icap_patience Vendor Advisory
- http://www.securityfocus.com/bid/31543 www.securityfocus.com
- http://www.securitytracker.com/id?1020979 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2739 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45625 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=122210321731789&w=2 marc.info
- http://marc.info/?l=bugtraq&m=122298544725313&w=2 marc.info
- http://secunia.com/advisories/32122 Vendor Advisory
- http://securityreason.com/securityalert/4367 securityreason.com
- http://www.bluecoat.com/support/securityadvisories/icap_patience Vendor Advisory
- http://www.securityfocus.com/bid/31543 www.securityfocus.com
- http://www.securitytracker.com/id?1020979 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2739 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45625 exchange.xforce.ibmcloud.com