← Back

CVE-2009-5131

nvd nist
Published: Aug 26, 2012Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which allows remote attackers to bypass intended access restrictions and send e-mail messages via an SMTP session.

Affected (3)

1 product
Websense Email Security
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Websense
Up to 7.0
Version 6.1
Version 6.1 sp1

Related CWEs

Timeline

No history available yet.