Websense Triton and V-Series HTML Injection Vulnerabilities

Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-WEB versions prior to 8.0.0 and V-Series 7.7 appliances suffer from multiple HTML injection vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code, which can be use...

Websense TRITON AP-WEB Information Disclosure Vulnerability

Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-WEB versions prior to 8.0.0 failed to properly restrict access to files in the explorerwse/ directory, allowing attackers to submit special requests to obtain sensitive information...

CVE-2015-2773

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors...

CVE-2015-2772

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors...

CVE-2015-2771

The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-2770

Cross-site request forgery CSRF vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-2769

Multiple cross-site request forgery CSRF vulnerabilities in the Personal Email Manager PEM in Websense TRITON AP-EMAIL before 8.0.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-2768

Cross-site scripting XSS vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2767

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled."...

CVE-2015-2766

The Personal Email Manager PEM in Websense TRITON AP-EMAIL before 8.0.0 allows attackers to have unspecified impact via a brute force attack...

CVE-2015-2765

The Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2015-2764

Multiple cross-site scripting XSS vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS 1 Mobile or 2 DLP report catalog...

CVE-2015-2763

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to port 17703...

CVE-2015-2762

Websense TRITON AP-WEB before 8.0.0 allows remote attackers to enumerate Windows domain user accounts via vectors related to HTTP authentication...

CVE-2015-2761

Cross-site scripting XSS vulnerability in the Exceptions and Scanning Exceptions Pages in Websense TRITON AP-WEB before 8.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-9712

Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS 1 Mobile or 2 DLP report catalog...

Design/Logic Flaw

The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to port 17703...

Authentication flaw

Websense TRITON AP-WEB before 8.0.0 allows remote attackers to enumerate Windows domain user accounts via vectors related to HTTP authentication...