CVE-2015-2771

The CVE-2015-2771 entry affects Websense TRITON AP-EMAIL and V-Series appliances. The root cause is plaintext credentials storage in the Mail Server prior to version 8.0.0, enabling remote attackers to obtain sensitive information via unspecified vectors. Affected products include TRITON AP-WEB, ...

CVE-2015-2771

The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-2761

Cross-site scripting XSS vulnerability in the Exceptions and Scanning Exceptions Pages in Websense TRITON AP-WEB before 8.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2769

CVE-2015-2769 describes multiple CSRF vulnerabilities in Websense TRITON AP-EMAIL PEM that allow remote attackers to hijack user authentication via unknown vectors. Affected products include Websense TRITON AP-EMAIL (earlier than 8.0.0) and related TRITON/AP-WEB, AP-DATA, and S/G components liste...

CVE-2015-2772

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors...

CVE-2015-2763

CVE-2015-2763 concerns an unspecified vulnerability in Websense TRITON AP-EMAIL prior to 8.0.0, with unknown impact and attack vectors and a tie to port 17703. The connected records provide limited technical detail: the CVE entry itself states no clarified impact or vectors, and no exploit specif...

CVE-2015-2773

Affected software: Websense TRITON V-Series appliances BEFORE version 8.0.0. Vulnerability: In the SVM component, reading of arbitrary local files via unspecified vectors is possible. This is corroborated by multiple sources (CVE-2015-2773 entry and CNVD-2015-02196) describing a directory/file re...

CVE-2015-2767

CVE-2015-2767 is an unspecified vulnerability affecting Websense TRITON AP-EMAIL, specifically in versions earlier than 8.0.0, linked to the Autocomplete feature. Public CNVD/NVD records describe an information exposure risk without explicit impact details; one CNVD entry notes that attackers cou...

CVE-2015-2761

The CVE-2015-2761 entry concerns a Cross-Site Scripting (XSS) vulnerability in the Websense TRITON AP-WEB product (and related TRITON/WEB suites) on the Exceptions and Scanning Exceptions Pages. The underlying issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors, ...

CVE-2015-2766

The Personal Email Manager PEM in Websense TRITON AP-EMAIL before 8.0.0 allows attackers to have unspecified impact via a brute force attack...

CVE-2015-2767

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled."...

CVE-2015-2763

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to port 17703...

CVE-2015-2764

Multiple cross-site scripting XSS vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS 1 Mobile or 2 DLP report catalog...

CVE-2015-2766

The CVE-2015-2766 entry describes a brute‑force vulnerability in the Personal Email Manager (PEM) within Websense TRITON AP-EMAIL prior to version 8.0.0, allowing unspecified impact when exploited. Connected sources corroborate the issue across multiple databases (CNVD/NVD/CVE records) and enumer...

CVE-2015-2764

CVE-2015-2764 describes multiple XSS vulnerabilities in Websense TRITON AP-DATA prior to 8.0.0, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS Mobile or DLP report catalog. The root cause is not more precisely defined in the provided documents,...

CVE-2015-2765

The CVE-2015-2765 entry describes a clickjacking flaw in the Email Security Gateway component of Websense TRITON AP-EMAIL prior to version 8.0.0. The root cause is unspecified in the provided text beyond the class of vulnerability (clickjacking), and there are no concrete exploit details in the c...

CVE-2015-2772

The CVE-2015-2772 entry covers a vulnerability in Websense TRITON V-Series appliances (before 8.0.0) where the SVM component allows uploading arbitrary files via unspecified vectors. This could enable an attacker to place files on the appliance, with potential impact including partial confidentia...

Multiple Websense Product 'explorer_wse' Path Access Bypass Vulnerabilities

Websense, Inc. NASDAQ: WBSN is the world's leading provider of integrated Web, information and data security protection solutions. Multiple Websense products are vulnerable to an "explorerwse" path access bypass vulnerability. This vulnerability allows attackers to bypass certain security...

Multiple Websense Product Data Security Module Page Cross-Site Scripting Vulnerabilities

Websense, Inc. NASDAQ: WBSN is the world's leading provider of integrated Web, information and data security protection solutions. Multiple Websense product data security module page cross-site scripting vulnerabilities due to the program failing to properly filter user-supplied input. The...

Unspecified Cross-Site Scripting Vulnerability in Multiple Websense Products

Websense, Inc. NASDAQ: WBSN is the world's leading provider of integrated Web, information and data security protection solutions. An unspecified cross-site scripting vulnerability exists in multiple Websense products due to the program failing to properly filter user-supplied input. The...