{"api_version":"1","generated_at":"2026-07-23T07:34:42+00:00","cve":"CVE-2007-6312","urls":{"html":"https://cve.report/CVE-2007-6312","api":"https://cve.report/api/cve/CVE-2007-6312.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-6312","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-6312"},"summary":{"title":"CVE-2007-6312","description":"Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-12-11 21:46:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/","name":"http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Liquidmatrix Security Digest » Advisory: Websense XSS Vulnerability","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/3432","name":"http://securityreason.com/securityalert/3432","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - Websense XSS Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38936","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38936","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/28019","name":"http://secunia.com/advisories/28019","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Websense \"username\" Cross-Site Scripting Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/26793","name":"http://www.securityfocus.com/bid/26793","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Websense Reporting Tools Login Page Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2007/4158","name":"http://www.vupen.com/english/advisories/2007/4158","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1019066","name":"http://www.securitytracker.com/id?1019066","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Websense Input Validation Hole in 'username' Parameter Permits Cross-Site Scripting Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/484824/100/0/threaded","name":"http://www.securityfocus.com/archive/1/484824/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.websense.com/SupportPortal/SupportKbs/1840.aspx","name":"http://www.websense.com/SupportPortal/SupportKbs/1840.aspx","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"KB 1840 - Possible cross-site scripting (XSS) condition in the username field of the Web Reporting Tools portal page - Websense, Inc.","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-6312","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6312","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"6312","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"websense","cpe5":"enterpise","cpe6":"6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"6312","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"websense","cpe5":"enterpise","cpe6":"6.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"6312","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"websense","cpe5":"reporting_tools","cpe6":"6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"6312","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"websense","cpe5":"reporting_tools","cpe6":"6.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"6312","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"websense","cpe5":"web_security_suite","cpe6":"6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"6312","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"websense","cpe5":"web_security_suite","cpe6":"6.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:02:36.484Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"26793","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/26793"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.websense.com/SupportPortal/SupportKbs/1840.aspx"},{"name":"20071210 Advisory: Websense XSS Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/484824/100/0/threaded"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/"},{"name":"ADV-2007-4158","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/4158"},{"name":"1019066","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1019066"},{"name":"3432","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3432"},{"name":"28019","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28019"},{"name":"websenseenterprise-logon-page-xss(38936)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38936"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-12-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"26793","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/26793"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.websense.com/SupportPortal/SupportKbs/1840.aspx"},{"name":"20071210 Advisory: Websense XSS Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/484824/100/0/threaded"},{"tags":["x_refsource_MISC"],"url":"http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/"},{"name":"ADV-2007-4158","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/4158"},{"name":"1019066","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1019066"},{"name":"3432","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3432"},{"name":"28019","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28019"},{"name":"websenseenterprise-logon-page-xss(38936)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38936"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-6312","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"26793","refsource":"BID","url":"http://www.securityfocus.com/bid/26793"},{"name":"http://www.websense.com/SupportPortal/SupportKbs/1840.aspx","refsource":"CONFIRM","url":"http://www.websense.com/SupportPortal/SupportKbs/1840.aspx"},{"name":"20071210 Advisory: Websense XSS Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/484824/100/0/threaded"},{"name":"http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/","refsource":"MISC","url":"http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/"},{"name":"ADV-2007-4158","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/4158"},{"name":"1019066","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1019066"},{"name":"3432","refsource":"SREASON","url":"http://securityreason.com/securityalert/3432"},{"name":"28019","refsource":"SECUNIA","url":"http://secunia.com/advisories/28019"},{"name":"websenseenterprise-logon-page-xss(38936)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38936"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-6312","datePublished":"2007-12-11T21:00:00.000Z","dateReserved":"2007-12-11T00:00:00.000Z","dateUpdated":"2024-08-07T16:02:36.484Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-12-11 21:46:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:websense:enterpise:6.3:*:*:*:*:*:*:*","matchCriteriaId":"4C401DD1-356A-4D49-92B6-79CDEBB0A950"},{"vulnerable":true,"criteria":"cpe:2.3:a:websense:enterpise:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55C994DC-41FA-48AB-AF96-D09F18F41C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:websense:reporting_tools:6.3:*:*:*:*:*:*:*","matchCriteriaId":"04921824-6D2F-4F58-B9CC-9B7514C125D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:websense:reporting_tools:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B693707D-84FF-4877-B6B1-DE573930B173"},{"vulnerable":true,"criteria":"cpe:2.3:a:websense:web_security_suite:6.3:*:*:*:*:*:*:*","matchCriteriaId":"5C6B33BD-95AF-46E9-9438-0142DE27B3D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:websense:web_security_suite:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"83262C61-49ED-4D16-BC10-FBEBD602D5E5"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"6312","Ordinal":"1","Title":"CVE-2007-6312","CVE":"CVE-2007-6312","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"6312","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.","Type":"Description","Title":"CVE-2007-6312"},{"CveYear":"2007","CveId":"6312","Ordinal":"2","NoteData":"2007-12-11","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"6312","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}