CVE-2014-9711 - CVE House

Back to Database

Status published Medium CVE-2014-9711

Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in...

4.3 CVSS

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB before 8.0.0 and Web Security and Filter, Web Security Gateway, and Web Security Gateway Anywhere 7.8.3 before Hotfix 02 and 7.8.4 before Hotfix 01 allow remote attackers to inject arbitrary web script or HTML via the (1) ReportName (Job Name) parameter to the Explorer report scheduler (cgi-bin/WsCgiExplorerSchedule.exe) in the Job Queue or the col parameter to the (2) Names or (3) Anonymous (explorer_wse/explorer_anon.exe) summary report page.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-9711

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from websense

View All →

TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict...

Stack-based buffer overflow in the handle_debug_network function in the manager...

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers...

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers...

The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances...

Affected Vendor

websense

View all reports →

Affected Software

triton ap web, triton web filter, triton web security, triton web security gateway, triton web security gateway anywhere

Vulnerable Versions:

0

Timeline

Official Publish: March 25th, 2015

Last Modified: August 6th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.