Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via a crafted (1) email or (2) HTTP request, which triggers a DLP Policy.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:27
Type | Values Removed | Values Added |
---|---|---|
References | () http://packetstormsecurity.com/files/130897/Websense-Data-Security-DLP-Incident-Forensics-Preview-XSS.html - | |
References | () http://seclists.org/fulldisclosure/2015/Mar/102 - | |
References | () http://www.securityfocus.com/archive/1/534908/100/0/threaded - | |
References | () https://www.securify.nl/advisory/SFY20140904/websense_data_security_dlp_incident_forensics_preview_is_vulnerable_to_cross_site_scripting.html - Exploit |
Information
Published : 2015-03-26 14:59
Updated : 2024-11-21 02:27
NVD link : CVE-2015-2747
Mitre link : CVE-2015-2747
CVE.ORG link : CVE-2015-2747
JSON object : View
Products Affected
websense
- triton
- v-series_appliances
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')