Vulnerability-Lookup

CNVD-2015-02000

Vulnerability from cnvd - Published: 2015-03-27

Title

Websense TRITON AP-EMAIL和V-Series模块跨站脚本漏洞

Description

Websense TRITON AP-EMAIL和V-Series都是美国Websense公司的产品。TRITON AP-EMAIL是一套电子邮件安全解决方案，它可识别针对性攻击、高风险用户和内部威胁，同时使移动员工可以采取应对措施，并确保其安全使用Microsoft Office 365等技术。V-Series是一个使用在Websense应用程序中的V系列模块。 Websense TRITON AP-EMAIL 8.0.0之前版本和V-Series模块7.7版本的Email Security Gateway中的Message Log存在跨站脚本漏洞。远程攻击者可借助邮件中的发件人地址利用该漏洞注入任意Web脚本或HTML。

Severity

中

Patch Name

Websense TRITON AP-EMAIL和V-Series模块跨站脚本漏洞的补丁

Patch Description

Websense TRITON AP-EMAIL和V-Series都是美国Websense公司的产品。TRITON AP-EMAIL是一套电子邮件安全解决方案，它可识别针对性攻击、高风险用户和内部威胁，同时使移动员工可以采取应对措施，并确保其安全使用Microsoft Office 365等技术。V-Series是一个使用在Websense应用程序中的V系列模块。Websense TRITON AP-EMAIL 8.0.0之前版本和V-Series模块7.7版本的Email Security Gateway中的Message Log存在跨站脚本漏洞。远程攻击者可借助邮件中的发件人地址利用该漏洞注入任意Web脚本或HTML。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： Http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0

Reference

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2702

Impacted products

Name
['Websense TRITON AP-EMAIL <8.0.0', 'Websense V-Series 7.7']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-2702"
    }
  },
  "description": "Websense TRITON AP-EMAIL\u548cV-Series\u90fd\u662f\u7f8e\u56fdWebsense\u516c\u53f8\u7684\u4ea7\u54c1\u3002TRITON AP-EMAIL\u662f\u4e00\u5957\u7535\u5b50\u90ae\u4ef6\u5b89\u5168\u89e3\u51b3\u65b9\u6848\uff0c\u5b83\u53ef\u8bc6\u522b\u9488\u5bf9\u6027\u653b\u51fb\u3001\u9ad8\u98ce\u9669\u7528\u6237\u548c\u5185\u90e8\u5a01\u80c1\uff0c\u540c\u65f6\u4f7f\u79fb\u52a8\u5458\u5de5\u53ef\u4ee5\u91c7\u53d6\u5e94\u5bf9\u63aa\u65bd\uff0c\u5e76\u786e\u4fdd\u5176\u5b89\u5168\u4f7f\u7528Microsoft Office 365\u7b49\u6280\u672f\u3002V-Series\u662f\u4e00\u4e2a\u4f7f\u7528\u5728Websense\u5e94\u7528\u7a0b\u5e8f\u4e2d\u7684V\u7cfb\u5217\u6a21\u5757\u3002\r\n\r\nWebsense TRITON AP-EMAIL 8.0.0\u4e4b\u524d\u7248\u672c\u548cV-Series\u6a21\u57577.7\u7248\u672c\u7684Email Security Gateway\u4e2d\u7684Message Log\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9\u90ae\u4ef6\u4e2d\u7684\u53d1\u4ef6\u4eba\u5730\u5740\u5229\u7528\u8be5\u6f0f\u6d1e\u6ce8\u5165\u4efb\u610fWeb\u811a\u672c\u6216HTML\u3002",
  "discovererName": "unknown",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nHttp://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-02000",
  "openTime": "2015-03-27",
  "patchDescription": "Websense TRITON AP-EMAIL\u548cV-Series\u90fd\u662f\u7f8e\u56fdWebsense\u516c\u53f8\u7684\u4ea7\u54c1\u3002TRITON AP-EMAIL\u662f\u4e00\u5957\u7535\u5b50\u90ae\u4ef6\u5b89\u5168\u89e3\u51b3\u65b9\u6848\uff0c\u5b83\u53ef\u8bc6\u522b\u9488\u5bf9\u6027\u653b\u51fb\u3001\u9ad8\u98ce\u9669\u7528\u6237\u548c\u5185\u90e8\u5a01\u80c1\uff0c\u540c\u65f6\u4f7f\u79fb\u52a8\u5458\u5de5\u53ef\u4ee5\u91c7\u53d6\u5e94\u5bf9\u63aa\u65bd\uff0c\u5e76\u786e\u4fdd\u5176\u5b89\u5168\u4f7f\u7528Microsoft Office 365\u7b49\u6280\u672f\u3002V-Series\u662f\u4e00\u4e2a\u4f7f\u7528\u5728Websense\u5e94\u7528\u7a0b\u5e8f\u4e2d\u7684V\u7cfb\u5217\u6a21\u5757\u3002Websense TRITON AP-EMAIL 8.0.0\u4e4b\u524d\u7248\u672c\u548cV-Series\u6a21\u57577.7\u7248\u672c\u7684Email Security Gateway\u4e2d\u7684Message Log\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9\u90ae\u4ef6\u4e2d\u7684\u53d1\u4ef6\u4eba\u5730\u5740\u5229\u7528\u8be5\u6f0f\u6d1e\u6ce8\u5165\u4efb\u610fWeb\u811a\u672c\u6216HTML\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Websense TRITON AP-EMAIL\u548cV-Series\u6a21\u5757\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Websense TRITON AP-EMAIL \u003c8.0.0",
      "Websense V-Series 7.7"
    ]
  },
  "referenceLink": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2702",
  "serverity": "\u4e2d",
  "submitTime": "2015-03-26",
  "title": "Websense TRITON AP-EMAIL\u548cV-Series\u6a21\u5757\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e"
}

CVE-2015-2702 (GCVE-0-2015-2702)

Vulnerability from cvelistv5 – Published: 2015-03-25 14:00 – Updated: 2024-08-06 05:24

Summary

Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2319 records in the last 180 days details

References

6 references

URL	Tags
http://www.securityfocus.com/archive/1/534909/100…	mailing-listx_refsource_BUGTRAQ
http://www.websense.com/support/article/kbarticle…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/73345	vdb-entryx_refsource_BID
http://seclists.org/fulldisclosure/2015/Mar/103	mailing-listx_refsource_FULLDISC
http://packetstormsecurity.com/files/130898/Webse…	x_refsource_MISC
https://www.securify.nl/advisory/SFY20140905/webs…	x_refsource_MISC

Date Public

2015-03-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:24:38.643Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20150318 Websense Email Security vulnerable to persistent Cross-Site Scripting in audit log details view",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/534909/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0"
          },
          {
            "name": "73345",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73345"
          },
          {
            "name": "20150318 Websense Email Security vulnerable to persistent Cross-Site Scripting in audit log details view",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2015/Mar/103"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/130898/Websense-Email-Security-Cross-Site-Scripting.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.securify.nl/advisory/SFY20140905/websense_email_security_vulnerable_to_persistent_cross_site_scripting_in_audit_log_details_view.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-03-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20150318 Websense Email Security vulnerable to persistent Cross-Site Scripting in audit log details view",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/534909/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0"
        },
        {
          "name": "73345",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73345"
        },
        {
          "name": "20150318 Websense Email Security vulnerable to persistent Cross-Site Scripting in audit log details view",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2015/Mar/103"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/130898/Websense-Email-Security-Cross-Site-Scripting.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.securify.nl/advisory/SFY20140905/websense_email_security_vulnerable_to_persistent_cross_site_scripting_in_audit_log_details_view.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-2702",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20150318 Websense Email Security vulnerable to persistent Cross-Site Scripting in audit log details view",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/534909/100/0/threaded"
            },
            {
              "name": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0",
              "refsource": "CONFIRM",
              "url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0"
            },
            {
              "name": "73345",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/73345"
            },
            {
              "name": "20150318 Websense Email Security vulnerable to persistent Cross-Site Scripting in audit log details view",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2015/Mar/103"
            },
            {
              "name": "http://packetstormsecurity.com/files/130898/Websense-Email-Security-Cross-Site-Scripting.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/130898/Websense-Email-Security-Cross-Site-Scripting.html"
            },
            {
              "name": "https://www.securify.nl/advisory/SFY20140905/websense_email_security_vulnerable_to_persistent_cross_site_scripting_in_audit_log_details_view.html",
              "refsource": "MISC",
              "url": "https://www.securify.nl/advisory/SFY20140905/websense_email_security_vulnerable_to_persistent_cross_site_scripting_in_audit_log_details_view.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-2702",
    "datePublished": "2015-03-25T14:00:00.000Z",
    "dateReserved": "2015-03-25T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:24:38.643Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted