CVE-2008-4485

Bluecoat Security Gateway OS - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the ICAP patience page in Blue Coat Security Gateway OS (SGOS) 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7 allows remote attackers to inject arbitrary web script or HTML via the URL.

References (9)

[Mailing List] http://marc.info/?l=bugtraq&m=122210321731789&w=2

[Mailing List] http://marc.info/?l=bugtraq&m=122298544725313&w=2

[Vendor Advisory] http://secunia.com/advisories/32122

[Vendor Advisory] http://www.bluecoat.com/support/securityadvisories/icap_patience

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/45625

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/31543

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1020979

[Third Party Advisory] http://www.vupen.com/english/advisories/2008/2739

[Third Party Advisory] http://securityreason.com/securityalert/4367

Scores

EPSS 0.0070

EPSS Percentile 71.8%

Classification

CWE

CWE-79

Status published

Affected Products (4)

bluecoat/security_gateway_os

n/a/n/a

Timeline

Published Oct 08, 2008

Tracked Since Feb 18, 2026