PT-2015-5885

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL and V-Series appliances versions prior to 8.0.0 Description The issue concerns the use of plaintext credentials in the Mail Server component. This allows remote attackers to obtain sensitive information. Recommendation...

PT-2015-1280

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue is related to an unspecified vulnerability in Websense TRITON AP-EMAIL, which has an unknown impact and attack vectors. It is associated with port 17703. The vulnerability...

CVE-2015-2766: Undefined Security Weakness

The Personal Email Manager PEM in Websense TRITON AP-EMAIL before 8.0.0 allows attackers to have unspecified impact via a brute force attack...

PT-2015-5883

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Personal Email Manager PEM component. These vulnerabilities allow remote attackers to hijack the...

CVE-2015-2763: Undefined Security Weakness

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to port 17703...

PT-2015-5881

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue in the Personal Email Manager PEM of Websense TRITON AP-EMAIL allows attackers to have an unspecified impact through a brute force attack. Recommendations For versions prio...

CVE-2015-2765: Improper Input Validation

The Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

PT-2015-1281

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue is related to "Autocomplete Enabled" and has an unknown impact and attack vectors. It concerns the lack of protection in Websense TRITON AP-EMAIL against network attacks...

CVE-2015-2768: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2767: Undefined Security Weakness

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled."...

PT-2015-5880

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue allows remote attackers to conduct clickjacking attacks. Recommendations For versions prior to 8.0.0, update to version 8.0.0 or later to resolve the issue...

CVE-2015-2771: Exposure of Sensitive Information to an Unauthorized Actor

The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2015-5882

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Websense TRITON V-Series appliances version 7.7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could...

CVE-2015-2702

Cross-site scripting XSS vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email...

CVE-2015-2702

CVE-2015-2702 describes a Cross-Site Scripting (XSS) vulnerability in the Message Log of Websense TRITON AP-EMAIL (Email Security Gateway) and V-Series appliances. The issue allows remote attackers to inject arbitrary web script or HTML via the sender address in an email when viewing the audit lo...

PT-2015-5843

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Websense TRITON V-Series appliances version 7.7 Description A cross-site scripting XSS issue exists in the Message Log of the Email Security Gateway, allowing remote attackers to inject arbitrar...

CVE-2015-2702: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email...