Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2014-9711
HistoryMar 25, 2015 - 2:59 p.m.

CVE-2014-9711

2015-03-2514:59:00
CWE-79
mitre
web.nvd.nist.gov
21
cve-2014-9711
cross-site scripting
xss
investigative reports
websense triton ap-web
web security gateway

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.005

Percentile

76.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB before 8.0.0 and Web Security and Filter, Web Security Gateway, and Web Security Gateway Anywhere 7.8.3 before Hotfix 02 and 7.8.4 before Hotfix 01 allow remote attackers to inject arbitrary web script or HTML via the (1) ReportName (Job Name) parameter to the Explorer report scheduler (cgi-bin/WsCgiExplorerSchedule.exe) in the Job Queue or the col parameter to the (2) Names or (3) Anonymous (explorer_wse/explorer_anon.exe) summary report page.

Affected configurations

Nvd
Node
websensetriton_ap_webRange≤7.8.3
OR
websensetriton_web_filterRange≤7.8.3
OR
websensetriton_web_securityRange≤7.8.3
OR
websensetriton_web_security_gatewayRange≤7.8.3
OR
websensetriton_web_security_gateway_anywhereRange≤7.8.3
VendorProductVersionCPE
websensetriton_ap_web*cpe:2.3:a:websense:triton_ap_web:*:*:*:*:*:*:*:*
websensetriton_web_filter*cpe:2.3:a:websense:triton_web_filter:*:*:*:*:*:*:*:*
websensetriton_web_security*cpe:2.3:a:websense:triton_web_security:*:*:*:*:*:*:*:*
websensetriton_web_security_gateway*cpe:2.3:a:websense:triton_web_security_gateway:*:*:*:*:*:*:*:*
websensetriton_web_security_gateway_anywhere*cpe:2.3:a:websense:triton_web_security_gateway_anywhere:*:*:*:*:*:*:*:*

References

Related

prion 1
cvelist 1
nvd 1
nessus 1
kaspersky 1
prion
prion
Cross site scripting
2015-03-25 14:59:00
cvelist
cvelist
CVE-2014-9711
2015-03-25 14:00:00
nvd
nvd
CVE-2014-9711
2015-03-25 14:59:00
nessus
nessus
Websense TRITON 7.8 Multiple Vulnerabilities
2015-05-21 00:00:00
kaspersky
kaspersky
KLA10506 Multiple vulnerabilities in Websense products
2015-03-25 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.005

Percentile

76.4%

JSON
Related for CVE-2014-9711
prion1cvelist1nvd1nessus1kaspersky1