What’s Vulnerable › Vulnerabilities

CVE-2009-1211

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-04-01 · updated 2026-06-16
• Weakness: CWE-16

Description

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.

Affected products

• Bluecoat Proxysg: all versions
• Bluecoat Proxysg Sg210-10: all versions
• Bluecoat Proxysg Sg210-25: all versions
• Bluecoat Proxysg Sg210-5: all versions
• Bluecoat Proxysg Sg510-10: all versions
• Bluecoat Proxysg Sg510-20: all versions
• Bluecoat Proxysg Sg510-25: all versions
• Bluecoat Proxysg Sg510-5: all versions
• Bluecoat Proxysg Sg810-10: all versions
• Bluecoat Proxysg Sg810-20: all versions
• Bluecoat Proxysg Sg810-25: all versions
• Bluecoat Proxysg Sg810-5: all versions
• Bluecoat Proxysg Sg9000-10: all versions
• Bluecoat Proxysg Sg9000-20: all versions
• Bluecoat Proxysg Sg9000-5: all versions
• Bluecoat Proxysg Va-10: all versions
• Bluecoat Proxysg Va-15: all versions
• Bluecoat Proxysg Va-20: all versions
• Bluecoat Proxysg Va-5: all versions

References

• http://www.securitytracker.com/id?1021781
• https://hypersonic.bluecoat.com/support/securityadvisories/ProxySG_in_transparent_deployments
• http://www.securitytracker.com/id?1021781
• https://hypersonic.bluecoat.com/support/securityadvisories/ProxySG_in_transparent_deployments

Get alerted when CVE-2009-1211 or the next vulnerability affects your stack