Is CVE-2015-8597 being actively exploited?

CVE-2015-8597 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2015-8597?

CVE-2015-8597 has a CVSS 3.0 base score of 7.4 (HIGH).

CVE-2015-8597

HIGH · CVSS 7.4EPSS 1.9%EU EUVD

Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway (ASG) 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as demonstrated by "http://www.%humbug-URL%.local/bluecoat-splash-API?%BASE64-URL%."

Key facts

CVSS score: 7.4 (v3.0)
Severity: HIGH
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
EPSS score: 1.9% (80th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2015-8475)
Published: January 8, 2016
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2015-8475 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

bluecoat / advanced secure gateway
bluecoat / proxysg

Certified products that may be affected

7 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Blue Coat ProxySG S400 and S500 running SGOS v6.5 - Blue Coat Systems, Inc. - Common Criteria CSEC2014004 - archived
ProxySG S400-20 [1], S400-30 [2] and S400-40 [3] - Blue Coat® Systems, Inc. - FIPS 140 2256 - historical
ProxySG S500-10 [1] and S500-20 [2] - Blue Coat® Systems, Inc. - FIPS 140 2257 - historical
Blue Coat ProxySG SG600, SG900, SG9000 running SGOS v6.5 - Blue Coat Systems, Inc. - Common Criteria 383-4-268 - archived
ProxySG SG900-10B [1], SG900-20 [2], SG900-30 [3], SG900-45 [4] and SG900-55 [5] - Blue Coat® Systems, Inc. - FIPS 140 2195 - historical

See all 7 in the Security Certifications Explorer.

References

http://knowitsecure.se/2015/12/18/knowit-secure-sakrar-bluecoat/(Exploit)
http://www.securitytracker.com/id/1034506
https://bto.bluecoat.com/security-advisory/sa107(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain