CVE-2015-2747: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the data loss prevention DLP incident Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via a crafted 1 email or 2 HTTP request, which triggers a DLP Policy...

PT-2015-5865

Name of the Vulnerable Software and Affected Versions Websense Triton version 7.8.3 Websense V-Series version 7.7 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted email or HTTP request, triggering a DLP Policy. This occurs due to multiple cross-si...

PT-2015-5844

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-WEB versions prior to 8.0.0 Websense V-Series appliances version 7.7 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the ws-userip in the ws-encdata parameter to...

Websense Data Security DLP incident Forensics Preview is vulnerable to Cross-Site Scripting

------------------------------------------------------------------------ Websense Data Security DLP incident Forensics Preview is vulnerable to Cross-Site Scripting ------------------------------------------------------------------------ Han Sahin, September 2014...