CVE-2015-2702: XSS
Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2702?
CVE-2015-2702 is considered a medium severity vulnerability due to its potential for XSS attacks.
What systems are affected by CVE-2015-2702?
CVE-2015-2702 affects Websense TRITON AP-EMAIL versions before 8.0.0, TRITON AP DATA up to 7.8.3, TRITON AP WEB up to 7.8.3, and V-Series appliances version 7.7.
How do I fix CVE-2015-2702?
To fix CVE-2015-2702, upgrade your Websense TRITON and V-Series appliances to the latest version that addresses this vulnerability.
What type of vulnerability is CVE-2015-2702?
CVE-2015-2702 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts via email sender addresses.
Can CVE-2015-2702 lead to data breaches?
Yes, if exploited, CVE-2015-2702 can facilitate data breaches by allowing attackers to execute arbitrary scripts in the context of the targeted user's session.