Lucene search

[email protected]CVE-2007-6312

HistoryDec 11, 2007 - 9:46 p.m.

CVE-2007-6312

2007-12-1121:46:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2007-6312

xss

web reporting tools

websense enterprise

web security suite

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.4%

JSON

Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.

Affected configurations

NVD

Node

websenseenterpiseMatch6.3

websenseenterpiseMatch6.3.1

websensereporting_toolsMatch6.3

websensereporting_toolsMatch6.3.1

websenseweb_security_suiteMatch6.3

websenseweb_security_suiteMatch6.3.1

CPENameOperatorVersion
websense:enterpisewebsense enterpiseeq6.3
websense:enterpisewebsense enterpiseeq6.3.1
websense:reporting_toolswebsense reporting toolseq6.3
websense:reporting_toolswebsense reporting toolseq6.3.1
websense:web_security_suitewebsense web security suiteeq6.3
websense:web_security_suitewebsense web security suiteeq6.3.1

CPE	Name	Operator	Version
websense:enterpise	websense enterpise	eq	6.3
websense:enterpise	websense enterpise	eq	6.3.1
websense:reporting_tools	websense reporting tools	eq	6.3
websense:reporting_tools	websense reporting tools	eq	6.3.1
websense:web_security_suite	websense web security suite	eq	6.3
websense:web_security_suite	websense web security suite	eq	6.3.1

References

secunia.com/advisories/28019

securityreason.com/securityalert/3432

www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/

www.securityfocus.com/archive/1/484824/100/0/threaded

www.securityfocus.com/bid/26793

www.securitytracker.com/id?1019066

www.vupen.com/english/advisories/2007/4158

www.websense.com/SupportPortal/SupportKbs/1840.aspx

exchange.xforce.ibmcloud.com/vulnerabilities/38936

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.4%

JSON

Related for CVE-2007-6312

cvelist1 nvd1 prion1 nessus1