CVE-2015-2855: The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3...

Security readout for executives and security teams

This issue affects the administrator WebUI on specific Blue Coat SSL Visibility Appliances. An admin session cookie was not marked HTTPS-only, so it could be exposed if transmitted over HTTP. Successful cookie theft could let an attacker reuse an administrator session. Exposure is likely limited to organizations still running affected Blue Coat SSL Visibility Appliance models with vulnerable 3.6.x, 3.7.x, or pre-3.8.4 3.8.x firmware and reachable administrative WebUI paths. Treat this as a targeted administrative-interface risk, not a broad internet worm risk. Prioritize remediation where affected appliances manage sensitive traffic inspection or are accessible outside a tightly controlled management network. Mitigation focus: Upgrade affected appliances to version 3.8.4 or later if supported by vendor guidance.; Restrict WebUI access to trusted management networks only.; Disable or block HTTP access to administrative interfaces where feasible..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.