5.8

CVE-2009-1211

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.

Data is provided by the National Vulnerability Database (NVD)
Bluecoat ≫ Proxysg Sg210-10 Version- Update- Editionacceleration
Bluecoat ≫ Proxysg Sg210-10 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg210-25 Version- Update- Editionacceleration
Bluecoat ≫ Proxysg Sg210-25 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg210-5 Version- Update- Editionacceleration
Bluecoat ≫ Proxysg Sg210-5 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg510-10 Version- Update- Editionacceleration
Bluecoat ≫ Proxysg Sg510-10 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg510-20 Version- Update- Editionacceleration
Bluecoat ≫ Proxysg Sg510-20 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg510-25 Version- Update- Editionacceleration
Bluecoat ≫ Proxysg Sg510-25 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg510-5 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg810-10 Version- Update- Editionacceleration
Bluecoat ≫ Proxysg Sg810-10 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg810-20 Version- Update- Editionacceleration
Bluecoat ≫ Proxysg Sg810-20 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg810-25 Version- Update- Editionacceleration
Bluecoat ≫ Proxysg Sg810-25 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg810-5 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg9000-10 Version- Update- Editionacceleration
Bluecoat ≫ Proxysg Sg9000-10 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg9000-20 Version- Update- Editionacceleration
Bluecoat ≫ Proxysg Sg9000-20 Version- Update- Editionfull_proxy
Bluecoat ≫ Proxysg Sg9000-5 Version- Update- Editionacceleration
Bluecoat ≫ Proxysg Sg9000-5 Version- Update- Editionfull_proxy
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.19% 0.371
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:N/I:P/A:P