CVE-2016-0894

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter...

CVE-2016-0893

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive information by reading error messages...

CVE-2016-0892

Cross-site scripting XSS vulnerability in EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0895

CVE-2016-0895 affects EMC RSA Data Loss Prevention 9.6 before SP2 P5, where remote attackers can trigger clickjacking via web-site elements with crafted transparency/opacity. The connected sources confirm the product/version and the vulnerability class but do not provide exploitation details or c...

CVE-2016-0893

CVE-2016-0893 affects EMC RSA Data Loss Prevention 9.6 prior to SP2 P5. The issue allows remote authenticated users to obtain sensitive information by reading error messages, indicating information disclosure through error handling. The provided connected documents confirm the affected product an...

CVE-2016-0894

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter...

CVE-2016-0894

The CVE affects EMC RSA Data Loss Prevention 9.6 before SP2 P5. A remote authenticated user can bypass object access restrictions by modifying a parameter, indicating an improper access-control validation in the affected component. Remediation: upgrade to EMC RSA DLP 9.6 SP2 P5 or apply the relev...

CVE-2016-0895

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to conduct clickjacking attacks via web-site elements with crafted transparency or opacity...

Cross site scripting

Cross-site scripting XSS vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention DLP before 12.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-9230

The CVE-2014-9230 issue is a cross-site scripting (XSS) vulnerability in the administration console of Symantec Data Loss Prevention (DLP) Enforce Server, prior to version 12.5.2. A remote attacker could inject arbitrary web script or HTML via unspecified vectors in the Enforce Server admin UI. T...

CVE-2015-1485

CVE-2015-1485 is a CSRF vulnerability in the administration console of Symantec Data Loss Prevention (DLP) Enforce Server, prior to version 12.5.2. The issue allows a remote attacker to hijack administrator authentication and perform unauthorized operations through forged requests, as stated in m...

Microsoft ExchangeDLP Cross Site Scripting (MS15-026; CVE-2015-1629)

An elevation of privilege vulnerability exists in Microsoft Exchange Server. The vulnerability is caused when Microsoft Exchange Server does not properly sanitize page content in Outlook Web App. A remote attacker can exploit this issue by modifying certain properties within Outlook Web App and...

MS15-038: Description of the security update for Windows: April 14, 2015 (KB3045999)

None None...

CVE-2015-2764

Multiple cross-site scripting XSS vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS 1 Mobile or 2 DLP report catalog...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS 1 Mobile or 2 DLP report catalog...

CVE-2015-2759

CVE-2015-2759 is tied to multiple CSRF vulnerabilities in the McAfee DLPe ePO extension, affecting DLPe versions prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4). The issue allows remote attackers to hijack user authentication to perform (1) information disclosure or (2) database modification via unspe...

CVE-2015-2760

CVE-2015-2760 is an XSS vulnerability in the McAfee DLPe ePO extension prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4). The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in the ePO extension of DLPe. Affected product/version: McAfee Data Loss Pr...

CVE-2015-2764

CVE-2015-2764 describes multiple XSS vulnerabilities in Websense TRITON AP-DATA prior to 8.0.0, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS Mobile or DLP report catalog. The root cause is not more precisely defined in the provided documents,...

CVE-2015-2764: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS 1 Mobile or 2 DLP report catalog...

CVE-2015-2747

Multiple cross-site scripting XSS vulnerabilities in the data loss prevention DLP incident Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via a crafted 1 email or 2 HTTP request, which triggers a DLP Policy...