CVE-2008-4485

Published: Oct 8, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the ICAP patience page in Blue Coat Security Gateway OS (SGOS) 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7 allows remote attackers to inject arbitrary web script or HTML via the URL.

Affected (3)

Products: Bluecoat: Security Gateway Os

Bluecoat

1 product

Security Gateway Os

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Bluecoat Security Gateway Os	Version 4.2
Bluecoat Security Gateway Os	Version 5.2
Bluecoat Security Gateway Os	Version 5.3

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (18)

http://marc.info/?l=bugtraq&m=122210321731789&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=122298544725313&w=2

Source: cve@mitre.org

http://secunia.com/advisories/32122

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/4367

Source: cve@mitre.org

http://www.bluecoat.com/support/securityadvisories/icap_patience

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/31543

Source: cve@mitre.org

http://www.securitytracker.com/id?1020979

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2739

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/45625

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=122210321731789&w=2