CVE-2015-2768

CVE-2015-2768 is a cross-site scripting (XSS) vulnerability in Websense TRITON AP-EMAIL prior to 8.0.0 and Websense V-Series 7.7 appliances. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected products include Websense TRITON AP-EMAIL and TRI...

CVE-2015-2770

CVE-2015-2770 describes a Cross-site request forgery (CSRF) on the TRITON V-Series command line page, allowing remote attackers to hijack authentication on Websense TRITON V-Series appliances pre-8.0.0. Affected products are Websense TRITON V-Series appliances before 8.0.0. The vulnerability is s...

CVE-2015-2772

The CVE-2015-2772 entry covers a vulnerability in Websense TRITON V-Series appliances (before 8.0.0) where the SVM component allows uploading arbitrary files via unspecified vectors. This could enable an attacker to place files on the appliance, with potential impact including partial confidentia...

CVE-2015-2773

Affected software: Websense TRITON V-Series appliances BEFORE version 8.0.0. Vulnerability: In the SVM component, reading of arbitrary local files via unspecified vectors is possible. This is corroborated by multiple sources (CVE-2015-2773 entry and CNVD-2015-02196) describing a directory/file re...

CVE-2015-2773

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors...

CVE-2014-9712

Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path...

CVE-2015-2771

The CVE-2015-2771 entry affects Websense TRITON AP-EMAIL and V-Series appliances. The root cause is plaintext credentials storage in the Mail Server prior to version 8.0.0, enabling remote attackers to obtain sensitive information via unspecified vectors. Affected products include TRITON AP-WEB, ...

CVE-2015-2771: Exposure of Sensitive Information to an Unauthorized Actor

The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2015-5886

Name of the Vulnerable Software and Affected Versions Websense TRITON V-Series appliances versions prior to 8.0.0 Description The issue allows attackers to upload arbitrary files via unspecified vectors. Recommendations For versions prior to 8.0.0, update to version 8.0.0 or later to resolve the...

PT-2015-5887

Name of the Vulnerable Software and Affected Versions Websense TRITON V-Series appliances versions prior to 8.0.0 Description The issue allows attackers to read arbitrary files. Recommendations For versions prior to 8.0.0, update to version 8.0.0 or later to resolve the issue...

RHEL 7 : kernel (RHSA-2015:0726)

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

PT-2015-5884

Name of the Vulnerable Software and Affected Versions Websense TRITON V-Series appliances versions prior to 8.0.0 Description A cross-site request forgery CSRF issue exists in the command line page, allowing remote attackers to hijack the authentication of victims via unknown vectors...

PT-2015-4360

Name of the Vulnerable Software and Affected Versions Websense TRITON V-Series appliances versions prior to 7.8.3 Hotfix 03 Websense TRITON V-Series appliances versions prior to 7.8.4 Hotfix 01 Description The issue allows remote administrators to read arbitrary files and obtain passwords via a...

PT-2015-5882

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Websense TRITON V-Series appliances version 7.7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could...

CVE-2015-2768: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2773: Undefined Security Weakness

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors...

CVE-2015-2770: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-9712: Exposure of Sensitive Information to an Unauthorized Actor

Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path...

CVE-2015-2772: Undefined Security Weakness

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors...

CVE-2015-2747

Multiple cross-site scripting XSS vulnerabilities in the data loss prevention DLP incident Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via a crafted 1 email or 2 HTTP request, which triggers a DLP Policy...