CVE-2008-7312

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization, which makes it easier for remote attackers to bypass filtering via an HTTP request, as demonstrated by a request to a compromised server associated with a specific IP address.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Aug 23, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-73139.8The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete f CVE-2008-73147.5mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.CVE-2008-73159.8UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands.CVE-2008-73165.5mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that CVE-2008-73199.8The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell meta CVE-2008-73206.8GNOME Seahorse through 3.30 allows physically proximate attackers to read plaintext passwords by using the quickAllow dialog at an unattende CVE-2008-73216.1The tubepress plugin before 1.6.5 for WordPress has XSS.