Lucene search
HistoryMar 27, 2015 - 2:59 p.m.
CVE-2015-2764
cve
2015
2764
cross-site scripting
xss
websense
triton
ap-data
dss
mobile
dlp
report catalog
remote attackers
html
web script
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.2%
Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS (1) Mobile or (2) DLP report catalog.
Affected configurations
Node
websensetriton_ap_dataRange≤7.8.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| websense:triton_ap_data | websense triton ap data | le | 7.8.3 |
Related
cvelist
cvelist
CVE-2015-2764
2015-03-27 14:00:00
nvd
nvd
CVE-2015-2764
2015-03-27 14:59:13
prion
prion
Cross site scripting
2015-03-27 14:59:00
kaspersky
kaspersky
KLA10506 Multiple vulnerabilities in Websense products
2015-03-25 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.2%
Related for CVE-2015-2764