kbrain

CVE-2009-1211

MEDIUM · CVSS 5.8EPSS 1.4%EU EUVD

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.

Key facts

CVSS score
5.8 (v2.0)
Severity
MEDIUM
CVSS vector
AV:N/AC:M/Au:N/C:N/I:P/A:P
Weakness (CWE)
CWE-16
EPSS score
1.4% (72th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2009-1210)
Published
April 1, 2009
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2009-1210 in the EU Vulnerability Database. Last updated in EUVD on September 17, 2024.

View on the EU Vulnerability Database

Affected products

  • bluecoat / proxysg
  • bluecoat / proxysg sg210-10
  • bluecoat / proxysg sg210-10
  • bluecoat / proxysg sg210-25
  • bluecoat / proxysg sg210-25
  • bluecoat / proxysg sg210-5
  • bluecoat / proxysg sg210-5
  • bluecoat / proxysg sg510-10
  • bluecoat / proxysg sg510-10
  • bluecoat / proxysg sg510-20
  • bluecoat / proxysg sg510-20
  • bluecoat / proxysg sg510-25
  • bluecoat / proxysg sg510-25
  • bluecoat / proxysg sg510-5
  • bluecoat / proxysg sg810-10
  • bluecoat / proxysg sg810-10
  • bluecoat / proxysg sg810-20
  • bluecoat / proxysg sg810-20
  • bluecoat / proxysg sg810-25
  • bluecoat / proxysg sg810-25
  • bluecoat / proxysg sg810-5
  • bluecoat / proxysg sg9000-10
  • bluecoat / proxysg sg9000-10
  • bluecoat / proxysg sg9000-20
  • bluecoat / proxysg sg9000-20
  • bluecoat / proxysg sg9000-5
  • bluecoat / proxysg sg9000-5
  • bluecoat / proxysg va-10
  • bluecoat / proxysg va-15
  • bluecoat / proxysg va-20
  • bluecoat / proxysg va-5

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain