CVE-2009-5122
Websense Email Security < 7.2 - Unauthenticated Sensitive Information Exposure via JBoss Status Page
Title source: llmDescription
The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive information from the JBoss status page via an unspecified query.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.websense.com/content/support/library/email/v72wes/release_notes/WES72_ReleaseNotes.pdf
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/78449
Scores
EPSS
0.0117
EPSS Percentile
63.8%
Details
CWE
CWE-200
Status
published
Products (3)
websense/websense_email_security
6.1 (2 CPE variants)
websense/websense_email_security
7.0
websense/websense_email_security
< 7.1
Published
Aug 23, 2012
Tracked Since
Feb 18, 2026