Vulnerabilities > Websense > Websense WEB Security > 7.1

DATE CVE VULNERABILITY TITLE RISK
2012-08-23 CVE-2012-4604 Improper Authentication vulnerability in Websense web Security
The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitrary reports via a crafted uid field, in conjunction with a crafted userRoles field, in a cookie, as demonstrated by a request to explorer_wse/favorites.exe.
network
websense CWE-287
4.3
2012-08-23 CVE-2011-5102 Permissions, Privileges, and Access Controls vulnerability in Websense products
The Investigative Reports web interface in the TRITON management console in Websense Web Security 7.1 before Hotfix 109, 7.1.1 before Hotfix 06, 7.5 before Hotfix 78, 7.5.1 before Hotfix 12, 7.6 before Hotfix 24, and 7.6.2 before Hotfix 12; Web Filter; Web Security Gateway; and Web Security Gateway Anywhere allows remote attackers to execute commands via unspecified vectors.
network
low complexity
websense CWE-264
7.5
2012-08-23 CVE-2010-5149 Denial-Of-Service vulnerability in Websense Web Security
Websense Web Security and Web Filter before 6.3.3 Hotfix 27 and 7.x before 7.1.1 allow remote attackers to cause a denial of service (Blue Coat appliance integration outage) via a long URL.
network
low complexity
websense
5.0
2012-08-23 CVE-2010-5147 Denial-Of-Service vulnerability in Websense Web Security
The Remote Filtering component in Websense Web Security and Web Filter before 6.3.3 Hotfix 18 and 7.x before 7.1.1 allows remote attackers to cause a denial of service (daemon exit) via a large volume of traffic.
network
low complexity
websense
5.0
2012-08-23 CVE-2010-5146 Permissions, Privileges, and Access Controls vulnerability in Websense web Filter and Websense web Security
The Remote Filtering component in Websense Web Security and Web Filter before 7.1 Hotfix 66 allows local users to bypass filtering by (1) renaming the WDC.exe file or (2) deleting driver files.
local
low complexity
websense CWE-264
2.1
2012-08-23 CVE-2010-5145 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Websense web Filter and Websense web Security
The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 136 and 7.x before 7.1.1 on Windows allows remote attackers to cause a denial of service (filtering outage) via a crafted sequence of characters in a URI.
4.3