CVE-2015-2747

Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via a crafted (1) email or (2) HTTP request, which triggers a DLP Policy.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:websense:triton:7.8.3:*:*:*:*:*:*:*
cpe:2.3:a:websense:v-series_appliances:7.7:*:*:*:*:*:*:*

History

21 Nov 2024, 02:27

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/130897/Websense-Data-Security-DLP-Incident-Forensics-Preview-XSS.html - () http://packetstormsecurity.com/files/130897/Websense-Data-Security-DLP-Incident-Forensics-Preview-XSS.html -
References () http://seclists.org/fulldisclosure/2015/Mar/102 - () http://seclists.org/fulldisclosure/2015/Mar/102 -
References () http://www.securityfocus.com/archive/1/534908/100/0/threaded - () http://www.securityfocus.com/archive/1/534908/100/0/threaded -
References () https://www.securify.nl/advisory/SFY20140904/websense_data_security_dlp_incident_forensics_preview_is_vulnerable_to_cross_site_scripting.html - Exploit () https://www.securify.nl/advisory/SFY20140904/websense_data_security_dlp_incident_forensics_preview_is_vulnerable_to_cross_site_scripting.html - Exploit

Information

Published : 2015-03-26 14:59

Updated : 2024-11-21 02:27


NVD link : CVE-2015-2747

Mitre link : CVE-2015-2747

CVE.ORG link : CVE-2015-2747


JSON object : View

Products Affected

websense

  • triton
  • v-series_appliances
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')