CVE-2016-9091

7.2 highEPSS 9.6%

Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges.

Severity

CVSS 3.0

7.2 high

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 9.6% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2017-04-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bluecoat:advanced_secure_gateway
bluecoat:content_analysis_system_software

References

http://www.securityfocus.com/bid/97372
https://bto.bluecoat.com/security-advisory/sa138
https://www.exploit-db.com/exploits/41785/
https://www.exploit-db.com/exploits/41786/
http://www.securityfocus.com/bid/97372

Check your stack JSON