Read the docs

Websense

Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Websense records in CISA KEV

No Websense vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

10 records in Triton Ap Email · all components

Priority LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in the Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allow remote attackers to hijack the authentication of unspecified victims via unkno…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00576 Published 2015-03-27 No fix listed CWE-352
Priority LOW 27

Websense TRITON AP-WEB before 8.0.0 does not properly restrict access to files in explorer_wse/, which allows remote attackers to obtain sensitive information via a direct request to a (1) Web Security incident report or…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02272 Published 2015-03-26 No fix listed CWE-200
Priority LOW 24

Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTM…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0209 Published 2015-03-25 No fix listed CWE-79
Open these records in search →