CVE-2002-1060: Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accele...

Security readout for executives and security teams

This old CacheOS issue lets an attacker make a Blue Coat/CacheFlow appliance reflect attacker-supplied HTML or script in an error page. The main business risk is phishing, session theft, or user trust abuse through infrastructure that users may already trust. Exposure is likely limited to organizations still operating legacy Blue Coat or CacheFlow CacheOS appliances or archived images matching the named versions. The bundle does not identify modern Symantec/Broadcom products as affected. Prioritize as a legacy-infrastructure cleanup and trust-risk issue. It is not shown as actively exploited here, but internet-facing or broadly used appliances deserve timely verification and remediation planning. Mitigation focus: Inventory CacheOS appliances and confirm exact product and version.; Check vendor CacheOS guidance and release notes for corrected builds.; Upgrade, replace, or retire affected unsupported appliances where feasible..

Prepared

Jun 30, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.