CVE-2007-6312 Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTM...
MediumCVSS 4.3
EPSS 15.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| websense enterpise | = 6.3 | No fix listed |
| websense enterpise | = 6.3.1 | No fix listed |
| websense reporting tools | = 6.3 | No fix listed |
| websense reporting tools | = 6.3.1 | No fix listed |
| websense web security suite | = 6.3 | No fix listed |
| websense web security suite | = 6.3.1 | No fix listed |
References
- 28019 third-party-advisory
- 3432 third-party-advisory
- www.liquidmatrix.org patch
- 20071210 Advisory: Websense XSS Vulnerability mailing-list
- 26793 vdb-entry
- 1019066 vdb-entry
- ADV-2007-4158 vdb-entry
- www.websense.com patch
- websenseenterprise-logon-page-xss(38936) vdb-entry