CVE-2007-6312: XSS
First published: Tue Dec 11 2007(Updated: )
Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Websense Enterpise | =6.3.1 | |
| Websense Web Security Suite | =6.3.1 | |
| Websense Web Security Suite | =6.3 | |
| Websense Reporting Tools | =6.3.1 | |
| Websense Enterpise | =6.3 | |
| Websense Reporting Tools | =6.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/
- http://www.websense.com/SupportPortal/SupportKbs/1840.aspx
- http://www.securityfocus.com/bid/26793
- http://www.securitytracker.com/id?1019066
- http://secunia.com/advisories/28019
- http://securityreason.com/securityalert/3432
- http://www.vupen.com/english/advisories/2007/4158
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38936
- http://www.securityfocus.com/archive/1/484824/100/0/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/type
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/websense
- canonical/websense enterpise
- version/websense enterpise/6.3.1
- canonical/websense web security suite
- version/websense web security suite/6.3.1
- version/websense web security suite/6.3
- canonical/websense reporting tools
- version/websense reporting tools/6.3.1
- version/websense enterpise/6.3
- version/websense reporting tools/6.3