Websense vulnerabilities

2 CVEs affecting Websense, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-5144, published 2012-08-23.

More from Websense.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-5144, published 2012-08-23. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server,…
• CVE-2006-2035, published 2006-04-26. Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days. Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a "/?" sequence to a URL.