CVE-2008-4485

Cross-site scripting (XSS) vulnerability in the ICAP patience page in Blue Coat Security Gateway OS (SGOS) 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7 allows remote attackers to inject arbitrary web script or HTML via the URL.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
VendorProductVersion
bluecoatsecurity_gateway_os
4.2
bluecoatsecurity_gateway_os
5.2
bluecoatsecurity_gateway_os
5.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://marc.info/?l=bugtraq&m=122210321731789&w=2
http://marc.info/?l=bugtraq&m=122298544725313&w=2
http://secunia.com/advisories/32122
http://securityreason.com/securityalert/4367
http://www.bluecoat.com/support/securityadvisories/icap_patience
http://www.securityfocus.com/bid/31543
http://www.securitytracker.com/id?1020979
http://www.vupen.com/english/advisories/2008/2739
https://exchange.xforce.ibmcloud.com/vulnerabilities/45625
http://marc.info/?l=bugtraq&m=122210321731789&w=2
http://marc.info/?l=bugtraq&m=122298544725313&w=2
http://secunia.com/advisories/32122
http://securityreason.com/securityalert/4367
http://www.bluecoat.com/support/securityadvisories/icap_patience
http://www.securityfocus.com/bid/31543
http://www.securitytracker.com/id?1020979
http://www.vupen.com/english/advisories/2008/2739
https://exchange.xforce.ibmcloud.com/vulnerabilities/45625