CVE-2012-4605: The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL...

Security readout for executives and security teams

CVE-2012-4605 concerns older Websense Email Security deployments whose SMTP component may use weak SSL ciphers by default. A network-positioned attacker could capture encrypted mail sessions and try to brute-force them, creating a confidentiality risk for email traffic. Exposure is most likely in legacy Websense Email Security 6.1-7.3 systems still processing SMTP traffic, especially where encrypted mail sessions traverse untrusted or monitorable network segments. Treat this as a legacy email confidentiality risk. Prioritize remediation where the product still handles sensitive mail or crosses shared networks, but there is no source-provided evidence of active exploitation. Mitigation focus: Check current vendor guidance for this legacy Websense Email Security issue.; Disable weak and export SSL ciphers for the affected SMTP component.; Upgrade or retire Websense Email Security 6.1 through 7.3 deployments..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.