CVE-2015-2747

Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via a crafted (1) email or (2) HTTP request, which triggers a DLP Policy.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:websense:triton:7.8.3:*:*:*:*:*:*:*
cpe:2.3:a:websense:v-series_appliances:7.7:*:*:*:*:*:*:*

History

No history.

Information

Published : 2015-03-26 14:59

Updated : 2024-02-28 12:20


NVD link : CVE-2015-2747

Mitre link : CVE-2015-2747

CVE.ORG link : CVE-2015-2747


JSON object : View

Products Affected

websense

  • v-series_appliances
  • triton
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')