PT-2015-4984 · Blue Coat · Blue Coat Malware Analysis Appliance

Garret Wassermann · Published 2015-04-17 · Updated 2016-12-08 · CVE-2015-0937

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Blue Coat Malware Analysis appliance versions prior to 4.2.4.20150312-RELEASE

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML.

Recommendations For versions prior to 4.2.4.20150312-RELEASE, update to version 4.2.4.20150312-RELEASE or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-0937

Affected Products

Blue Coat Malware Analysis Appliance

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0937 · Security Note
• http://kb.cert.org/vuls/id/274244 · Note
• https://bto.bluecoat.com/security-advisory/sa94 · Note