RSS   Vulnerabilities for 'Triton web security'   RSS

2015-03-25
 
CVE-2014-9711

CWE-79
 
 
Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB before 8.0.0 and Web Security and Filter, Web Security Gateway, and Web Security Gateway Anywhere 7.8.3 before Hotfix 02 and 7.8.4 before Hotfix 01 allow remote attackers to inject arbitrary web script or HTML via the (1) ReportName (Job Name) parameter to the Explorer report scheduler (cgi-bin/WsCgiExplorerSchedule.exe) in the Job Queue or the col parameter to the (2) Names or (3) Anonymous (explorer_wse/explorer_anon.exe) summary report page.

 
2014-04-12
 
CVE-2014-0347

CWE-255
 
 
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to read cleartext passwords by replacing type="password" with type="text" in an INPUT element in the (1) Log Database or (2) User Directories component.

 

 >>> Vendor: Websense 25 Products
Websense
Enterprise
Web security suite
Enterpise
Reporting tools
Personal email manager
Websense email security
Email security
Websense web filter
Websense web security
Websense web security gateway
Websense web security gateway anywhere
Websense content content gateway
Websense v10000
Triton unified security center
Triton web filter
Triton web security
Triton web security gateway
Triton web security gateway anywhere
Triton ap web
Triton ap data
Triton ap email
V-series appliances
Triton
Content gateway

Copyright 2024, cxsecurity.com

 

Back to Top