PatchTheCVEwebsense web filter vulnerabilities and fixes
Recent CVEs affecting websense web filter, with upgrade or downgrade steps. 10 tracked.
Also searched as: websensewebfilter.
websense web filter has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2012-08-26. Highest priority: CVE-2011-5102 (score 49/100).
- CVE-2011-5102 HIGH 7.5 MITIGATE DOWNGRADE The Investigative Reports web interface in the TRITON management console in Websense Web Security 7.1 before H
- CVE-2010-5149 MEDIUM 5.0 UPGRADE UPGRADE Websense Web Security and Web Filter before 6.3.3 Hotfix 27 and 7.x before 7.1.1 allow remote attackers to cau
- CVE-2010-5148 MEDIUM 5.0 UPGRADE UPGRADE Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session
- CVE-2010-5147 MEDIUM 5.0 UPGRADE UPGRADE The Remote Filtering component in Websense Web Security and Web Filter before 6.3.3 Hotfix 18 and 7.x before 7
- CVE-2010-5146 LOW 2.1 UPGRADE UPGRADE The Remote Filtering component in Websense Web Security and Web Filter before 7.1 Hotfix 66 allows local users
- CVE-2010-5145 MEDIUM 4.3 UPGRADE UPGRADE The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 136 and 7.x before 7.1.1 on
- CVE-2010-5144 MEDIUM 4.3 UPGRADE DOWNGRADE The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earl
- CVE-2009-5132 MEDIUM 5.0 UPGRADE UPGRADE The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 106 and 7.x before 7.1 allow
- CVE-2009-5120 MEDIUM 4.3 DOWNGRADE DOWNGRADE The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0
- CVE-2009-5119 MEDIUM 4.3 DOWNGRADE DOWNGRADE The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0
FAQ
How do I fix websense web filter vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is websense web filter being exploited right now?
None of the tracked websense web filter CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which websense web filter CVE should I patch first?
CVE-2011-5102 currently ranks highest (49/100): The Investigative Reports web interface in the TRITON management console in Websense Web Security 7.1 before H.