websense email security vulnerabilities and fixes

Recent CVEs affecting websense email security, with upgrade or downgrade steps. 5 tracked.

Also searched as: websenseemailsecurity.

websense email security has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2012-08-26. Highest priority: CVE-2009-5131 (score 36/100).

• CVE-2012-4605 MEDIUM 5.0 DOWNGRADE The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ci
• CVE-2009-5131 MEDIUM 5.0 UPGRADE The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklis
• CVE-2009-5130 MEDIUM 4.3 UPGRADE The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (
• CVE-2009-5122 MEDIUM 5.0 UPGRADE The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain p
• CVE-2009-5121 MEDIUM 5.0 DOWNGRADE Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by us

FAQ

How do I fix websense email security vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is websense email security being exploited right now?

None of the tracked websense email security CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which websense email security CVE should I patch first?

CVE-2009-5131 currently ranks highest (36/100): The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklis.

RSS feed for websense email security · ← Back to latest CVEs