CVE-2015-2748

MEDIUM 5.0CVE-2015-2748 · Published 26/03/2015 · updated 17/06/2026

In short

CVE-2015-2748 is a MEDIUM (CVSS 5.0) vulnerability affecting triton ap data (websense), triton ap email (websense), triton ap web (websense).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
triton ap data websense	`≤ 7.8.3`	No fix yet
triton ap email websense	`≤ 7.8.3`	No fix yet
triton ap web websense	`≤ 7.8.3`	No fix yet
v-series appliances websense	`≤ 7.7`	No fix yet

Description

Websense TRITON AP-WEB before 8.0.0 does not properly restrict access to files in explorer_wse/, which allows remote attackers to obtain sensitive information via a direct request to a (1) Web Security incident report or the (2) Explorer configuration (websense.ini) file.

References

More vulnerabilities in triton ap data

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free