{"id":"CVE-2015-2852","url":"https://www.cyber-defence.io/tools/cve/CVE-2015-2852","generatedAt":"2026-10-27T22:05:19.358Z","title":"Cross-site request forgery (CSRF) vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack the authentication of administrators.","description":"Cross-site request forgery (CSRF) vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack the authentication of administrators.","published":"2015-05-30T19:59:05.000Z","lastModified":"2026-06-17T00:24:52.000Z","status":"Modified","sourceIdentifier":"cret@cert.org","cvss":{"version":"2.0","score":4.3,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N"},"cwe":["CWE-352"],"affected":["blue coat/ssl visibility appliance sv2800 firmware","blue coat/ssl visibility appliance sv1800 firmware","blue coat/ssl visibility appliance sv3800 firmware","blue coat/ssl visibility appliance sv800 firmware"],"epss":{"score":0.00688,"percentile":0.52467,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.69%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.kb.cert.org/vuls/id/498348","tags":["Third Party Advisory","US Government Resource"],"source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/74921","source":"cret@cert.org"},{"url":"https://bto.bluecoat.com/security-advisory/sa96","tags":["Vendor Advisory"],"source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/498348","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/74921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa96","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-2852","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}