CVE-2007-6312
medium · 4.3Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.
4.3
CVSS
15.9%
EPSS (exploit prob.)
97th
EPSS percentile
2007-12-11
Published
AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| websense | enterpise | 6.3 |
| websense | enterpise | 6.3.1 |
| websense | reporting_tools | 6.3 |
| websense | reporting_tools | 6.3.1 |
| websense | web_security_suite | 6.3 |
| websense | web_security_suite | 6.3.1 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/28019
- http://securityreason.com/securityalert/3432
- http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/
- http://www.securityfocus.com/archive/1/484824/100/0/threaded
- http://www.securityfocus.com/bid/26793
- http://www.securitytracker.com/id?1019066
- http://www.vupen.com/english/advisories/2007/4158
- http://www.websense.com/SupportPortal/SupportKbs/1840.aspx
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38936
- http://secunia.com/advisories/28019
- http://securityreason.com/securityalert/3432
- http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/
- http://www.securityfocus.com/archive/1/484824/100/0/threaded
- http://www.securityfocus.com/bid/26793
- http://www.securitytracker.com/id?1019066
- http://www.vupen.com/english/advisories/2007/4158
- http://www.websense.com/SupportPortal/SupportKbs/1840.aspx
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38936
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-6312