CVE-2012-4604: Websense Web Security

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitrary reports via a crafted uid field, in conjunction with a crafted userRoles field, in a cookie, as demonstrated by a request to explorer_wse/favorites.exe.

Affected products

• Websense Websense Web Security: up to and including 7.6; version 6.3.0 only; version 6.3.1 only; version 6.3.2 only; version 6.3.3 only; version 7.0 only; …

Published 2012-08-23. Last modified 2026-06-16.