Is CVE-2009-1211 actively exploited?

No active exploitation of CVE-2009-1211 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2009-1211 be exploited remotely?

Yes. CVE-2009-1211 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2009-1211?

CVE-2009-1211 has a CVSS score of 5.8 (MEDIUM).

HOME VULNERABILITIESCVE-2009-1211

MEDIUM

CVE-2009-1211

CWE-16Published: April 1, 2009· Updated: Jun 16, 2026

5.8

CVSS v3.1

Official Description

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.

NVD Source

Technical Analysis

CVE-2009-1211 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityM

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityNone

IntegrityP

AvailabilityP

AV:N/AC:M/Au:N/C:N/I:P/A:P

Affected Vendors & Products

bluecoat19 product(s)

proxysg va-10proxysg va-15proxysg va-20proxysg va-5proxysgproxysg sg210-10proxysg sg210-25proxysg sg210-5proxysg sg510-10proxysg sg510-20proxysg sg510-25proxysg sg510-5+7

Source: NVD CPE · 19 total CPE entries