Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
websense vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2009-3749
The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote malicious users to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket befo...
Websense Personal Email Manager 7.1
Websense Email Security 7.1
1 EDB exploit
4.3
CVSSv2
CVE-2015-2703
Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-WEB prior to 8.0.0 and V-Series 7.7 appliances allow remote malicious users to inject arbitrary web script or HTML via the (1) ws-userip in the ws-encdata parameter to cve-bin/moreBlockInfo.cgi in the Data ...
Websense Triton Ap Web
Websense V-series Appliances 7.7
4.3
CVSSv2
CVE-2015-2768
Cross-site scripting (XSS) vulnerability in Websense TRITON AP-EMAIL prior to 8.0.0 and V-Series 7.7 appliances allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Websense V-series Appliances 7.7
Websense Triton Ap Email
2.1
CVSSv2
CVE-2008-4646
The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database.
Websense Enterpise 6.3.2
5
CVSSv2
CVE-2007-6511
Websense Enterprise 6.3.1 allows remote malicious users to bypass content filtering by visiting http URLs with a (1) RealPlayer G2, (2) MSMSGS, or (3) StoneHttpAgent User-Agent header, which results in a Non-HTTP categorization.
Websense Enterpise 6.3.1
4
CVSSv2
CVE-2015-5718
Stack-based buffer overflow in the handle_debug_network function in the manager in Websense Content Gateway prior to 8.0.0 HF02 allows remote administrators to cause a denial of service (crash) via a crafted diagnostic command line request to submit_net_debug.cgi.
Websense Content Gateway 8.0.0
4
CVSSv2
CVE-2014-9712
Websense TRITON V-Series appliances prior to 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path.
Websense V-series Appliances
5
CVSSv2
CVE-2015-2762
Websense TRITON AP-WEB prior to 8.0.0 allows remote malicious users to enumerate Windows domain user accounts via vectors related to HTTP authentication.
Websense Triton Ap Web
4.3
CVSSv2
CVE-2015-2764
Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-DATA prior to 8.0.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors to the DSS (1) Mobile or (2) DLP report catalog.
Websense Triton Ap Data
4.3
CVSSv2
CVE-2015-2765
The Email Security Gateway in Websense TRITON AP-EMAIL prior to 8.0.0 allows remote malicious users to conduct clickjacking attacks via unspecified vectors.
Websense Triton Ap Email
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4761
command injection
CVE-2024-3676
IDOR
CVE-2024-30039
CVE-2024-32113
CVE-2024-30049
CVE-2024-4776
SQL injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »