Vulnerability record · CVE-2015-2702 · published 25 March 2015

CVE-2015-2702: Websense triton ap data cross-site scripting vulnerability

Websense · Triton Ap Data

Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email.

4.3 CVSS 2.0 Medium EPSS 2.1% · top 19.1% CWE-79 · Cross-site scripting

4.3CVSS 2.0 base score

2.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

4Affected product versions listed by NVD

12References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Triton Ap Data Websense

Triton Ap Email Websense

Triton Ap Web Websense

V Series Appliances Websense

References

Link	Tags
http://packetstormsecurity.com/files/130898/Websense-Email-Security-Cross-Site-Scripting.html
http://seclists.org/fulldisclosure/2015/Mar/103
http://www.securityfocus.com/archive/1/534909/100/0/threaded
http://www.securityfocus.com/bid/73345
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0	Vendor Advisory
https://www.securify.nl/advisory/SFY20140905/websense_email_security_vulnerable_to_persistent_cross_site_scripting_in_au	Exploit
http://packetstormsecurity.com/files/130898/Websense-Email-Security-Cross-Site-Scripting.html
http://seclists.org/fulldisclosure/2015/Mar/103
http://www.securityfocus.com/archive/1/534909/100/0/threaded
http://www.securityfocus.com/bid/73345
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0	Vendor Advisory
https://www.securify.nl/advisory/SFY20140905/websense_email_security_vulnerable_to_persistent_cross_site_scripting_in_au	Exploit

Track CVE-2015-2702 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2015-2767Websense triton ap email vulnerabilityUnspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled."EPSS 1.4%27 Mar 2015 10.0CVE-2015-2763Websense triton ap email vulnerabilityUnspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to port 17703.EPSS 1.4%27 Mar 2015 7.5CVE-2017-11177Websense triton ap email improper input validation vulnerabilityTRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory.EPSS 1.0%6 Nov 2017 7.5CVE-2015-2772Websense v-series appliances vulnerabilitySVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors.EPSS 1.1%27 Mar 2015 6.8CVE-2015-2770Websense v-series appliances cross-site request forgery vulnerabilityCross-site request forgery (CSRF) vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers …EPSS 0.58%27 Mar 2015 6.8CVE-2015-2769Websense triton ap email cross-site request forgery vulnerabilityMultiple cross-site request forgery (CSRF) vulnerabilities in the Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allow remote …EPSS 0.58%27 Mar 2015 6.5CVE-2015-2746Websense triton command injection vulnerabilityThe network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliance…EPSS 25%26 Mar 2015 5.0CVE-2015-2773Websense v-series appliances vulnerabilitySVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors.EPSS 0.98%27 Mar 2015

Source: NIST National Vulnerability Database (record CVE-2015-2702), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.