Websense Websense Email Security — known CVE vulnerabilities

Every CVE whose affected-product data names Websense Websense Email Security, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2009-5121 — CVSS 5.0 (medium): Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by using the 8BITMIME EHLO keyword…
• CVE-2009-5122 — CVSS 5.0 (medium): The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive…
• CVE-2009-5131 — CVSS 5.0 (medium): The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which allows remote…
• CVE-2012-4605 — CVSS 5.0 (medium): The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl…
• CVE-2009-3748 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and…
• CVE-2009-5130 — CVSS 4.3 (medium): The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service crash) via an…