websense vulnerabilities

Recent CVEs affecting websense products. 43 tracked.

websense has 43 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 32. Most recent: 2017-11-06. Highest priority: CVE-2015-2767 (score 53/100).

• CVE-2017-11177 HIGH 7.5 DOWNGRADE TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory.
• CVE-2015-5718 MEDIUM 4.0 DOWNGRADE Stack-based buffer overflow in the handle_debug_network function in the manager in Websense Content Gateway be
• CVE-2015-2773 MEDIUM 5.0 UPGRADE SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecifi
• CVE-2015-2772 HIGH 7.5 UPGRADE SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspeci
• CVE-2015-2771 MEDIUM 5.0 UPGRADE UPGRADE The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, w
• CVE-2015-2770 MEDIUM 6.8 UPGRADE Cross-site request forgery (CSRF) vulnerability in the command line page in Websense TRITON V-Series appliance
• CVE-2015-2769 MEDIUM 6.8 UPGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in the Personal Email Manager (PEM) in Websense TRI
• CVE-2015-2768 MEDIUM 4.3 UPGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances
• CVE-2015-2767 HIGH 10.0 UPGRADE Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, rela
• CVE-2015-2766 MEDIUM 5.0 UPGRADE The Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allows attackers to have unspecified
• CVE-2015-2765 MEDIUM 4.3 UPGRADE The Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 allows remote attackers to conduct clickja
• CVE-2015-2764 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attac
• CVE-2015-2763 HIGH 10.0 UPGRADE Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, rela
• CVE-2015-2762 MEDIUM 5.0 UPGRADE Websense TRITON AP-WEB before 8.0.0 allows remote attackers to enumerate Windows domain user accounts via vect
• CVE-2015-2761 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in the Exceptions and Scanning Exceptions Pages in Websense TRITON AP
• CVE-2015-2748 MEDIUM 5.0 UPGRADE UPGRADE Websense TRITON AP-WEB before 8.0.0 does not properly restrict access to files in explorer_wse/, which allows
• CVE-2015-2747 MEDIUM 4.3 DOWNGRADE DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Previ
• CVE-2015-2746 MEDIUM 6.5 DOWNGRADE UPGRADE The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Webse
• CVE-2015-2703 MEDIUM 4.3 UPGRADE DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-WEB before 8.0.0 and V-Series 7.7 ap
• CVE-2015-2702 MEDIUM 4.3 UPGRADE UPGRADE Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON A
• CVE-2014-9712 MEDIUM 4.0 UPGRADE Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrat
• CVE-2014-9711 MEDIUM 4.3 UPGRADE UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB bef
• CVE-2014-0347 LOW 3.5 DOWNGRADE DOWNGRADE The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before
• CVE-2012-4605 MEDIUM 5.0 DOWNGRADE The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ci
• CVE-2012-4604 MEDIUM 4.3 UPGRADE The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass
• CVE-2012-2984 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in monitor/m_overview.ink in Websense Content Gateway befo
• CVE-2011-5102 HIGH 7.5 MITIGATE DOWNGRADE The Investigative Reports web interface in the TRITON management console in Websense Web Security 7.1 before H
• CVE-2010-5149 MEDIUM 5.0 UPGRADE UPGRADE Websense Web Security and Web Filter before 6.3.3 Hotfix 27 and 7.x before 7.1.1 allow remote attackers to cau
• CVE-2010-5148 MEDIUM 5.0 UPGRADE UPGRADE Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session
• CVE-2010-5147 MEDIUM 5.0 UPGRADE UPGRADE The Remote Filtering component in Websense Web Security and Web Filter before 6.3.3 Hotfix 18 and 7.x before 7
• CVE-2010-5146 LOW 2.1 UPGRADE UPGRADE The Remote Filtering component in Websense Web Security and Web Filter before 7.1 Hotfix 66 allows local users
• CVE-2010-5145 MEDIUM 4.3 UPGRADE UPGRADE The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 136 and 7.x before 7.1.1 on
• CVE-2010-5144 MEDIUM 4.3 UPGRADE DOWNGRADE The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earl
• CVE-2009-5132 MEDIUM 5.0 UPGRADE UPGRADE The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 106 and 7.x before 7.1 allow
• CVE-2009-5131 MEDIUM 5.0 UPGRADE The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklis
• CVE-2009-5130 MEDIUM 4.3 UPGRADE The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (
• CVE-2009-5129 MEDIUM 5.0 UPGRADE The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent
• CVE-2009-5128 MEDIUM 5.0 MITIGATE The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consum
• CVE-2009-5122 MEDIUM 5.0 UPGRADE The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain p
• CVE-2009-5121 MEDIUM 5.0 DOWNGRADE Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by us
• CVE-2009-5120 MEDIUM 4.3 DOWNGRADE DOWNGRADE The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0
• CVE-2009-5119 MEDIUM 4.3 DOWNGRADE DOWNGRADE The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0
• CVE-2008-7312 MEDIUM 5.0 DOWNGRADE The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categ

FAQ

How do I fix websense vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is websense being exploited right now?

None of the tracked websense CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which websense CVE should I patch first?

CVE-2015-2767 currently ranks highest (53/100): Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, rela.

Products

• content gateway
• enterprise
• triton
• triton ap data
• triton ap email
• triton ap web
• triton unified security center
• triton web filter
• triton web security
• triton web security gateway
• triton web security gateway anywhere
• v-series appliances
• websense
• websense content content gateway
• websense email security
• websense v10000
• websense web filter
• websense web security
• websense web security gateway
• websense web security gateway anywhere

RSS feed for websense · ← Back to latest CVEs