Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2015-2702: Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON A

40
This month
MEDIUM 4.3UPGRADEUPGRADEUPGRADE

CVE-2015-2702 is a medium-severity flaw (CVSS 4.3) affecting triton ap data, triton ap email, triton ap web. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email.

Why this priority

  • Public exploit reference

A fixed release or distro patch exists.

Risk facts

CVSS score4.3 (Medium)
EPSS exploit chance2.1% (top 18%)
CISA exploited listNo
WeaknessCWE-79
Published2015-03-25
Last modified2026-06-17
Publisher (CNA): MITRE · Vendor: websense

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

websense triton ap data UPGRADE
Affected: <= 7.8.3
Fixed in: newer than 7.8.3
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy triton-ap-data || rpm -q triton-ap-data || triton-ap-data --version
2. UPGRADE to newer than 7.8.3 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade triton-ap-data
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade triton-ap-data
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
websense triton ap email UPGRADE
Affected: <= 7.8.3
Fixed in: newer than 7.8.3
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy triton-ap-email || rpm -q triton-ap-email || triton-ap-email --version
2. UPGRADE to newer than 7.8.3 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade triton-ap-email
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade triton-ap-email
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
websense triton ap web UPGRADE
Affected: <= 7.8.3
Fixed in: newer than 7.8.3
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy triton-ap-web || rpm -q triton-ap-web || triton-ap-web --version
2. UPGRADE to newer than 7.8.3 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade triton-ap-web
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade triton-ap-web
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
websense v-series appliances DOWNGRADE
Affected: 7.7
Fixed in: no fixed release known
Safe to downgrade to: a release before 7.7
1. Check installed version
apt-cache policy v-series-appliances || rpm -q v-series-appliances || v-series-appliances --version
2. No fixed release: DOWNGRADE to a release before 7.7 (Debian / Ubuntu)
apt-cache madison v-series-appliances sudo apt install v-series-appliances=<VERSION_BEFORE_7.7> sudo apt-mark hold v-series-appliances
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list v-series-appliances sudo dnf downgrade v-series-appliances-<VERSION_BEFORE_7.7> sudo dnf versionlock add v-series-appliances
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2015-2702?

triton ap data: upgrade to newer than 7.8.3; triton ap email: upgrade to newer than 7.8.3; triton ap web: upgrade to newer than 7.8.3. Exact commands for each OS are on this page.

Is CVE-2015-2702 being exploited?

CVE-2015-2702 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2015-2702 affect?

CVE-2015-2702 affects triton ap data, triton ap email, triton ap web. Severity is medium (CVSS 4.3). Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender add

How urgent is CVE-2015-2702?

Priority 40/100. Public exploit reference

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.