Websense V-series Appliances — known CVE vulnerabilities

Every CVE whose affected-product data names Websense V-series Appliances, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2015-2772 — CVSS 7.5 (high): SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors.
• CVE-2015-2770 — CVSS 6.8 (medium): Cross-site request forgery (CSRF) vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote…
• CVE-2015-2746 — CVSS 6.5 (medium): The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series…
• CVE-2015-2773 — CVSS 5.0 (medium): SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors.
• CVE-2015-2748 — CVSS 5.0 (medium): Websense TRITON AP-WEB before 8.0.0 does not properly restrict access to files in explorer_wse/, which allows remote attackers to obtain…
• CVE-2015-2771 — CVSS 5.0 (medium): The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers…
• CVE-2015-2768 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to…
• CVE-2015-2703 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-WEB before 8.0.0 and V-Series 7.7 appliances allow remote…
• CVE-2015-2747 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Preview in Websense Triton 7.8.3…
• CVE-2015-2702 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and…
• CVE-2014-9712 — CVSS 4.0 (medium): Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files…