Read the docs
TI-2010-04844 Aliases CVE-2010-5146GHSA-vppx-x848-7vg6

The Remote Filtering component in Websense Web Security and Web Filter before 7.1 Hotfix…

Priority LOW 11CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

The Remote Filtering component in Websense Web Security and Web Filter before 7.1 Hotfix 66 allows local users to bypass filtering by (1) renaming the WDC.exe file or (2) deleting driver files.

Why it matters now

EPSS 0.00386 32nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:a:websense:websense_web_security:*:*:*:*:*:*:*:*up to 7.1VulnerableWebsense
cpe:2.3:a:websense:websense_web_security:6.3.0:*:*:*:*:*:*:*6.3.0VulnerableWebsense
cpe:2.3:a:websense:websense_web_security:6.3.1:*:*:*:*:*:*:*6.3.1VulnerableWebsense
cpe:2.3:a:websense:websense_web_security:6.3.2:*:*:*:*:*:*:*6.3.2VulnerableWebsense
cpe:2.3:a:websense:websense_web_security:6.3.3:*:*:*:*:*:*:*6.3.3VulnerableWebsense
cpe:2.3:a:websense:websense_web_security:7.0:*:*:*:*:*:*:*7.0VulnerableWebsense
cpe:2.3:a:websense:websense_web_filter:*:*:*:*:*:*:*:*up to 7.1VulnerableWebsense
cpe:2.3:a:websense:websense_web_filter:6.3.0:*:*:*:*:*:*:*6.3.0VulnerableWebsense
cpe:2.3:a:websense:websense_web_filter:6.3.1:*:*:*:*:*:*:*6.3.1VulnerableWebsense
cpe:2.3:a:websense:websense_web_filter:6.3.2:*:*:*:*:*:*:*6.3.2VulnerableWebsense
  • cpe:2.3:a:websense:websense_web_security:*:*:*:*:*:*:*:* Versions up to 7.1 Vulnerable ·Websense
  • cpe:2.3:a:websense:websense_web_security:6.3.0:*:*:*:*:*:*:* Versions 6.3.0 Vulnerable ·Websense
  • cpe:2.3:a:websense:websense_web_security:6.3.1:*:*:*:*:*:*:* Versions 6.3.1 Vulnerable ·Websense
  • cpe:2.3:a:websense:websense_web_security:6.3.2:*:*:*:*:*:*:* Versions 6.3.2 Vulnerable ·Websense
  • cpe:2.3:a:websense:websense_web_security:6.3.3:*:*:*:*:*:*:* Versions 6.3.3 Vulnerable ·Websense
  • cpe:2.3:a:websense:websense_web_security:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Websense
  • cpe:2.3:a:websense:websense_web_filter:*:*:*:*:*:*:*:* Versions up to 7.1 Vulnerable ·Websense
  • cpe:2.3:a:websense:websense_web_filter:6.3.0:*:*:*:*:*:*:* Versions 6.3.0 Vulnerable ·Websense
  • cpe:2.3:a:websense:websense_web_filter:6.3.1:*:*:*:*:*:*:* Versions 6.3.1 Vulnerable ·Websense
  • cpe:2.3:a:websense:websense_web_filter:6.3.2:*:*:*:*:*:*:* Versions 6.3.2 Vulnerable ·Websense
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:websense:websense_web_filter:6.3.3:*:*:*:*:*:*:*6.3.3VulnerableWebsense
cpe:2.3:a:websense:websense_web_filter:7.0:*:*:*:*:*:*:*7.0VulnerableWebsense
  • cpe:2.3:a:websense:websense_web_filter:6.3.3:*:*:*:*:*:*:* Versions 6.3.3 Vulnerable ·Websense
  • cpe:2.3:a:websense:websense_web_filter:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Websense

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-5146
  2. 2026-10-03 Alias added: GHSA-vppx-x848-7vg6

References

Other 2

  • TI-2011-04379 The Investigative Reports web interface in the TRITON management console in Websense Web… CVSS 2.0HIGH 7.5
  • TI-2010-04847 Websense Web Security and Web Filter before 6.3.3 Hotfix 27 and 7.x before 7.1.1 allow… CVSS 2.0MEDIUM 5.0
  • TI-2010-04846 Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for… CVSS 2.0MEDIUM 5.0
  • TI-2010-04845 The Remote Filtering component in Websense Web Security and Web Filter before 6.3.3… CVSS 2.0MEDIUM 5.0
  • TI-2009-04879 The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 106 and… CVSS 2.0MEDIUM 5.0
  • TI-2010-04843 The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 136 and… CVSS 2.0MEDIUM 4.3
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences