CVE-2015-2702 Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitra...
MediumCVSS 4.3
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| websense triton ap data | <= 7.8.3 | No fix listed |
| websense triton ap email | <= 7.8.3 | No fix listed |
| websense triton ap web | <= 7.8.3 | No fix listed |
| websense v-series appliances | = 7.7 | No fix listed |
References
- packetstormsecurity.com
- 20150318 Websense Email Security vulnerable to persistent Cross-Site Scripting in audit log details view mailing-list
- 20150318 Websense Email Security vulnerable to persistent Cross-Site Scripting in audit log details view mailing-list
- 73345 vdb-entry
- www.websense.com vendor-advisory
- www.securify.nl exploit