CVE-2007-6312

CVE-2007-6312 is an XSS vulnerability in the login page of Websense’s Web Reporting Tools portal (Websense Enterprise/Web Security Suite 6.3). The issue arises because the username field is not properly sanitized, allowing remote attackers to inject arbitrary script or HTML via that input. Affect...

CVE-2008-4646

The CVE concerns the Websense Reporter Module in Websense Enterprise 6.3.2. Affected component: Websense Reporter Module; vulnerability: the SQL database system administrator password is stored in plaintext in CreateDbInstall.log. Root cause: credentials are written to a log file, exposing the pa...

CVE-2007-6511

Websense Enterprise 6.3.1 is affected by a bypass vulnerability in its content filtering mechanism. The issue allows remote attackers to circumvent filtering by sending HTTP requests with specific User-Agent headers (RealPlayer G2, MSMSGS, or StoneHttpAgent), causing the URL to be categorized as ...