Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via a crafted (1) email or (2) HTTP request, which triggers a DLP Policy.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2015-03-26 14:59
Updated : 2024-02-28 12:20
NVD link : CVE-2015-2747
Mitre link : CVE-2015-2747
CVE.ORG link : CVE-2015-2747
JSON object : View
Products Affected
websense
- v-series_appliances
- triton
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')