CVE-2010-5190

Published: Aug 26, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1 allows remote attackers to bypass JavaScript detection via HTML entities.

Affected (52)

Products: Bluecoat: Sgos, Proxysg, Proxysg Sg210 10, Proxysg Sg210 25, Proxysg Sg210 5, Proxysg Sg510 10, Proxysg Sg510 20, Proxysg Sg510 25, Proxysg Sg510 5, Proxysg Sg810 10, Proxysg Sg810 20, Proxysg Sg810 25, Proxysg Sg810 5, Proxysg Sg9000 10, Proxysg Sg9000 20, Proxysg Sg9000 5

16 products

Configuration A

52 vulnerable

Vulnerable Software	Affected Versions
Bluecoat Sgos	Up to 4.3.4
Bluecoat Sgos	Version 3.2.6
Bluecoat Sgos	Version 4.1.2.1
Bluecoat Sgos	Version 4.2.1.2
Bluecoat Sgos	Version 4.2.1.6
Bluecoat Sgos	Version 4.2.2.1
Bluecoat Sgos	Version 4.2.2.2
Bluecoat Sgos	Version 4.2.2
Bluecoat Sgos	Version 4.2.3.12
Bluecoat Sgos	Version 4.2.3.21
Bluecoat Sgos	Version 4.2.3.26
Bluecoat Sgos	Version 4.2.3.4
Bluecoat Sgos	Version 4.2.3.7
Bluecoat Sgos	Version 4.2.3
Bluecoat Sgos	Version 4.2.4.1
Bluecoat Sgos	Version 4.2.5.1
Bluecoat Sgos	Version 4.2.5
Bluecoat Sgos	Version 4.2.6.1
Bluecoat Sgos	Version 4.2.6.4
Bluecoat Sgos	Version 4.2.6
Bluecoat Sgos	Version 4.2.7.1
Bluecoat Sgos	Version 5.2.2.4
Bluecoat Sgos	Version 5.4.5
Bluecoat Sgos	Version 5.5.4
Bluecoat Sgos	Version 6.1.2
Bluecoat Proxysg	All versions
Bluecoat Proxysg Sg210 10	All versions
Bluecoat Proxysg Sg210 10	All versions
Bluecoat Proxysg Sg210 25	All versions
Bluecoat Proxysg Sg210 25	All versions
Bluecoat Proxysg Sg210 5	All versions
Bluecoat Proxysg Sg210 5	All versions
Bluecoat Proxysg Sg510 10	All versions
Bluecoat Proxysg Sg510 10	All versions
Bluecoat Proxysg Sg510 20	All versions
Bluecoat Proxysg Sg510 20	All versions
Bluecoat Proxysg Sg510 25	All versions
Bluecoat Proxysg Sg510 25	All versions
Bluecoat Proxysg Sg510 5	All versions
Bluecoat Proxysg Sg810 10	All versions
Bluecoat Proxysg Sg810 10	All versions
Bluecoat Proxysg Sg810 20	All versions
Bluecoat Proxysg Sg810 20	All versions
Bluecoat Proxysg Sg810 25	All versions
Bluecoat Proxysg Sg810 25	All versions
Bluecoat Proxysg Sg810 5	All versions
Bluecoat Proxysg Sg9000 10	All versions
Bluecoat Proxysg Sg9000 10	All versions
Bluecoat Proxysg Sg9000 20	All versions
Bluecoat Proxysg Sg9000 20	All versions
Bluecoat Proxysg Sg9000 5	All versions
Bluecoat Proxysg Sg9000 5	All versions

Related CWEs

CWE-264

References (2)

https://kb.bluecoat.com/index?page=content&id=SA48

Source: cve@mitre.org

https://kb.bluecoat.com/index?page=content&id=SA48

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.