Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Websense Subscribe
Total 49 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-5149 1 Websense 2 Websense Web Filter, Websense Web Security 2017-08-28 5.0 MEDIUM N/A
Websense Web Security and Web Filter before 6.3.3 Hotfix 27 and 7.x before 7.1.1 allow remote attackers to cause a denial of service (Blue Coat appliance integration outage) via a long URL.
CVE-2015-2763 1 Websense 1 Triton Ap Email 2016-12-02 10.0 HIGH N/A
Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to port 17703.
CVE-2015-2761 1 Websense 1 Triton Ap Web 2016-12-02 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Exceptions and Scanning Exceptions Pages in Websense TRITON AP-WEB before 8.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-2771 1 Websense 2 Triton Ap Email, V-series Appliances 2016-12-02 5.0 MEDIUM N/A
The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2015-2772 1 Websense 1 V-series Appliances 2016-12-02 7.5 HIGH N/A
SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors.
CVE-2015-2773 1 Websense 1 V-series Appliances 2016-12-02 5.0 MEDIUM N/A
SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors.
CVE-2015-2768 1 Websense 2 Triton Ap Email, V-series Appliances 2016-12-02 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-2767 1 Websense 1 Triton Ap Email 2016-12-02 10.0 HIGH N/A
Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled."
CVE-2015-2762 1 Websense 1 Triton Ap Web 2016-12-02 5.0 MEDIUM N/A
Websense TRITON AP-WEB before 8.0.0 allows remote attackers to enumerate Windows domain user accounts via vectors related to HTTP authentication.
CVE-2015-2766 1 Websense 1 Triton Ap Email 2016-12-02 5.0 MEDIUM N/A
The Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allows attackers to have unspecified impact via a brute force attack.
CVE-2015-2765 1 Websense 1 Triton Ap Email 2016-12-02 4.3 MEDIUM N/A
The Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
CVE-2015-2764 1 Websense 1 Triton Ap Data 2016-12-02 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS (1) Mobile or (2) DLP report catalog.
CVE-2014-9712 1 Websense 1 V-series Appliances 2016-06-23 4.0 MEDIUM N/A
Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path.
CVE-2015-2769 1 Websense 1 Triton Ap Email 2015-03-30 6.8 MEDIUM N/A
Multiple cross-site request forgery (CSRF) vulnerabilities in the Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2015-2770 1 Websense 1 V-series Appliances 2015-03-30 6.8 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2014-0347 1 Websense 5 Triton Unified Security Center, Triton Web Filter, Triton Web Security and 2 more 2014-04-14 3.5 LOW N/A
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to read cleartext passwords by replacing type="password" with type="text" in an INPUT element in the (1) Log Database or (2) User Directories component.
CVE-2012-2984 1 Websense 1 Websense Content Content Gateway 2013-03-21 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in monitor/m_overview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) item parameter.
CVE-2009-5130 1 Websense 1 Websense Email Security 2012-08-27 4.3 MEDIUM N/A
The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service crash) via an attachment with a crafted size.
CVE-2009-5129 1 Websense 1 Websense V10000 2012-08-27 5.0 MEDIUM N/A
The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP authentication outage) via a login attempt with an incorrect password.
CVE-2009-5128 1 Websense 1 Websense V10000 2012-08-27 5.0 MEDIUM N/A
The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and process crash) via a large file that is not properly handled during buffering.