CVE
- Id
- 80131
- CVE No.
- CVE-2015-2854
- Status
- Candidate
- Description
- The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via vectors involving an IFRAME element.
- Phase
- Assigned (20150403)
- Votes
- None (candidate not yet proposed)
- Comments