CVE-2015-2763

CVE-2015-2763 concerns an unspecified vulnerability in Websense TRITON AP-EMAIL prior to 8.0.0, with unknown impact and attack vectors and a tie to port 17703. The connected records provide limited technical detail: the CVE entry itself states no clarified impact or vectors, and no exploit specif...

CVE-2015-2765

The CVE-2015-2765 entry describes a clickjacking flaw in the Email Security Gateway component of Websense TRITON AP-EMAIL prior to version 8.0.0. The root cause is unspecified in the provided text beyond the class of vulnerability (clickjacking), and there are no concrete exploit details in the c...

CVE-2015-2766

The CVE-2015-2766 entry describes a brute‑force vulnerability in the Personal Email Manager (PEM) within Websense TRITON AP-EMAIL prior to version 8.0.0, allowing unspecified impact when exploited. Connected sources corroborate the issue across multiple databases (CNVD/NVD/CVE records) and enumer...

CVE-2015-2767

CVE-2015-2767 is an unspecified vulnerability affecting Websense TRITON AP-EMAIL, specifically in versions earlier than 8.0.0, linked to the Autocomplete feature. Public CNVD/NVD records describe an information exposure risk without explicit impact details; one CNVD entry notes that attackers cou...

CVE-2015-2768

CVE-2015-2768 is a cross-site scripting (XSS) vulnerability in Websense TRITON AP-EMAIL prior to 8.0.0 and Websense V-Series 7.7 appliances. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected products include Websense TRITON AP-EMAIL and TRI...

CVE-2015-2769

CVE-2015-2769 describes multiple CSRF vulnerabilities in Websense TRITON AP-EMAIL PEM that allow remote attackers to hijack user authentication via unknown vectors. Affected products include Websense TRITON AP-EMAIL (earlier than 8.0.0) and related TRITON/AP-WEB, AP-DATA, and S/G components liste...

CVE-2015-2764

CVE-2015-2764 describes multiple XSS vulnerabilities in Websense TRITON AP-DATA prior to 8.0.0, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS Mobile or DLP report catalog. The root cause is not more precisely defined in the provided documents,...

CVE-2015-2771

The CVE-2015-2771 entry affects Websense TRITON AP-EMAIL and V-Series appliances. The root cause is plaintext credentials storage in the Mail Server prior to version 8.0.0, enabling remote attackers to obtain sensitive information via unspecified vectors. Affected products include TRITON AP-WEB, ...

CVE-2015-2771: Exposure of Sensitive Information to an Unauthorized Actor

The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2015-1281

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue is related to "Autocomplete Enabled" and has an unknown impact and attack vectors. It concerns the lack of protection in Websense TRITON AP-EMAIL against network attacks...

PT-2015-1280

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue is related to an unspecified vulnerability in Websense TRITON AP-EMAIL, which has an unknown impact and attack vectors. It is associated with port 17703. The vulnerability...

PT-2015-5878

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-WEB versions prior to 8.0.0 Description The issue allows remote attackers to enumerate Windows domain user accounts via vectors related to HTTP authentication. Recommendations For versions prior to 8.0.0, update to version...

PT-2015-5882

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Websense TRITON V-Series appliances version 7.7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could...

PT-2015-5883

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Personal Email Manager PEM component. These vulnerabilities allow remote attackers to hijack the...

PT-2015-5881

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue in the Personal Email Manager PEM of Websense TRITON AP-EMAIL allows attackers to have an unspecified impact through a brute force attack. Recommendations For versions prio...

PT-2015-5885

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL and V-Series appliances versions prior to 8.0.0 Description The issue concerns the use of plaintext credentials in the Mail Server component. This allows remote attackers to obtain sensitive information. Recommendation...

PT-2015-5880

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Description The issue allows remote attackers to conduct clickjacking attacks. Recommendations For versions prior to 8.0.0, update to version 8.0.0 or later to resolve the issue...

PT-2015-5879

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-DATA versions prior to 8.0.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to th...

CVE-2015-2762: Exposure of Sensitive Information to an Unauthorized Actor

Websense TRITON AP-WEB before 8.0.0 allows remote attackers to enumerate Windows domain user accounts via vectors related to HTTP authentication...

PT-2015-5877

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-WEB versions prior to 8.0.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system...