CVE-2009-5131: Websense Email Security

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which allows remote attackers to bypass intended access restrictions and send e-mail messages via an SMTP session.

Affected products

• Websense Websense Email Security: up to and including 7.0; version 6.1 only

Published 2012-08-26. Last modified 2026-06-16.