CVE-2015-2703

概要

参考情報

• packetstormsecurity.com/files/130902/Websense-Data-Security-Cross-Site-Scripting.html · Exploit
• packetstormsecurity.com/files/130908/Websense-Content-Gateway-Error-Message-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Mar/106
• seclists.org/fulldisclosure/2015/Mar/108
• securityfocus.com/archive/1/534912/100/0/threaded
• securityfocus.com/archive/1/534914/100/0/threaded
• websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 · Vendor Advisory
• securify.nl/advisory/SFY20140910/cross_site_scripting_vulnerability_in_websense_data_security_block_page.html · Exploit
• securify.nl/advisory/SFY20140916/error_messages_of_websense_content_gateway_are_vulnerable_to_cross_site_scripting.html

triton ap web のその他の脆弱性

• CVE-2015-2762中 5.0Websense TRITON AP-WEB before 8.0.0 allows remote attackers to enumerate Windows domain user accounts via vectors related to HTTP authentica…
• CVE-2015-2761中 4.3Cross-site scripting (XSS) vulnerability in the Exceptions and Scanning Exceptions Pages in Websense TRITON AP-WEB before 8.0.0 allows remot…
• CVE-2015-2748中 5.0Websense TRITON AP-WEB before 8.0.0 does not properly restrict access to files in explorer_wse/, which allows remote attackers to obtain sen…
• CVE-2015-2702中 4.3Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Ser…
• CVE-2014-9711中 4.3Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB before 8.0.0 and Web Security and…