CVE-2007-6312

Published: Dec 11, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.

Affected (6)

Products: Websense: Enterpise, Reporting Tools, Web Security Suite

3 products

Reporting Tools

Web Security Suite

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Websense Enterpise	Version 6.3.1
Websense Enterpise	Version 6.3
Websense Reporting Tools	Version 6.3.1
Websense Reporting Tools	Version 6.3
Websense Web Security Suite	Version 6.3.1
Websense Web Security Suite	Version 6.3

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (18)

http://secunia.com/advisories/28019

Source: cve@mitre.org

http://securityreason.com/securityalert/3432

Source: cve@mitre.org

http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/

Source: cve@mitre.org

Patch

http://www.securityfocus.com/archive/1/484824/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/26793

Source: cve@mitre.org

http://www.securitytracker.com/id?1019066

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4158

Source: cve@mitre.org

http://www.websense.com/SupportPortal/SupportKbs/1840.aspx

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/38936

Source: cve@mitre.org

http://secunia.com/advisories/28019

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/3432

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/archive/1/484824/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26793

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019066

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/4158

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.websense.com/SupportPortal/SupportKbs/1840.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/38936

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.