PT-2015-5882

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Websense TRITON V-Series appliances version 7.7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could...

CVE-2015-2768: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-1281

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue is related to "Autocomplete Enabled" and has an unknown impact and attack vectors. It concerns the lack of protection in Websense TRITON AP-EMAIL against network attacks...

PT-2015-5881

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue in the Personal Email Manager PEM of Websense TRITON AP-EMAIL allows attackers to have an unspecified impact through a brute force attack. Recommendations For versions prio...

PT-2015-5880

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue allows remote attackers to conduct clickjacking attacks. Recommendations For versions prior to 8.0.0, update to version 8.0.0 or later to resolve the issue...

CVE-2015-2766: Undefined Security Weakness

The Personal Email Manager PEM in Websense TRITON AP-EMAIL before 8.0.0 allows attackers to have unspecified impact via a brute force attack...

CVE-2015-2771: Exposure of Sensitive Information to an Unauthorized Actor

The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-2767: Undefined Security Weakness

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled."...

PT-2015-5883

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Personal Email Manager PEM component. These vulnerabilities allow remote attackers to hijack the...

CVE-2015-2769: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Personal Email Manager PEM in Websense TRITON AP-EMAIL before 8.0.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2015-5885

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL and V-Series appliances versions prior to 8.0.0 Description The issue concerns the use of plaintext credentials in the Mail Server component. This allows remote attackers to obtain sensitive information. Recommendation...

CVE-2015-2763: Undefined Security Weakness

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to port 17703...

CVE-2015-2765: Improper Input Validation

The Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2015-2702

Cross-site scripting XSS vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email...

CVE-2015-2702

CVE-2015-2702 describes a Cross-Site Scripting (XSS) vulnerability in the Message Log of Websense TRITON AP-EMAIL (Email Security Gateway) and V-Series appliances. The issue allows remote attackers to inject arbitrary web script or HTML via the sender address in an email when viewing the audit lo...

CVE-2015-2702: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email...

PT-2015-5843

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Websense TRITON V-Series appliances version 7.7 Description A cross-site scripting XSS issue exists in the Message Log of the Email Security Gateway, allowing remote attackers to inject arbitrar...