CVE-2007-6312

Websense Enterprise/Web Security Suite 6.3 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.

References (9)

[Patch] http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/

[Patch] http://www.websense.com/SupportPortal/SupportKbs/1840.aspx

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/38936

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/484824/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/26793

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1019066

[Third Party Advisory] http://secunia.com/advisories/28019

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/4158

[Third Party Advisory] http://securityreason.com/securityalert/3432

Scores

EPSS 0.0129

EPSS Percentile 79.4%

Classification

CWE

CWE-79

Status draft

Affected Products (6)

websense/enterpise

websense/reporting_tools

websense/web_security_suite

Timeline

Published Dec 11, 2007

Tracked Since Feb 18, 2026