Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB before 8.0.0 and Web Security and Filter, Web Security Gateway, and Web Security Gateway Anywhere 7.8.3 before Hotfix 02 and 7.8.4 before Hotfix 01 allow remote attackers to inject arbitrary web script or HTML via the (1) ReportName (Job Name) parameter to the Explorer report scheduler (cgi-bin/WsCgiExplorerSchedule.exe) in the Job Queue or the col parameter to the (2) Names or (3) Anonymous (explorer_wse/explorer_anon.exe) summary report page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款Websense产品Investigative Reports 跨站脚本漏洞
Vulnerability Description
Websense TRITON AP-WEB等都是美国Websense公司的网络安全产品。TRITON AP-WEB可为本地和远程用户提供对高级威胁和数据窃取的实时保护；Web Security and Filter（Web安全和过滤）可防御网络攻击，并减少恶意软件感染。 多款Websense产品的Investigative Reports中存在跨站脚本漏洞，该漏洞源于Job Queue中的Explorer report scheduler(cgi-bin/WsCgiExplorerSchedule.ex
CVSS Information
N/A
Vulnerability Type
N/A