Unrated severityNVD Advisory· Published May 30, 2015· Updated Jun 17, 2026
CVE-2015-2854
CVE-2015-2854
Description
The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via vectors involving an IFRAME element.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:o:blue_coat:ssl_visibility_appliance_sv1800_firmware:*:*:*:*:*:*:*:*Range: <=3.8.3
- cpe:2.3:o:blue_coat:ssl_visibility_appliance_sv2800_firmware:*:*:*:*:*:*:*:*Range: <=3.8.3
- cpe:2.3:o:blue_coat:ssl_visibility_appliance_sv3800_firmware:*:*:*:*:*:*:*:*Range: <=3.8.3
cpe:2.3:o:blue_coat:ssl_visibility_appliance_sv800_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:blue_coat:ssl_visibility_appliance_sv800_firmware:*:*:*:*:*:*:*:*range: <=3.8.3
- (no CPE)range: 3.6.x through 3.8.x before 3.8.4
Patches
Vulnerability mechanics
References
3- www.kb.cert.org/vuls/id/498348nvdThird Party AdvisoryUS Government Resource
- bto.bluecoat.com/security-advisory/sa96nvdVendor Advisory
- www.securityfocus.com/bid/74921nvd
News mentions
0No linked articles in our index yet.