CVE-2014-9711: Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB...

Security readout for executives and security teams

CVE-2014-9711 is a set of cross-site scripting flaws in Websense/TRITON reporting features. An attacker able to reach affected reporting pages could inject script or HTML that runs in another user’s browser, potentially affecting administrators using those reports. Exposure is most likely in organizations still running legacy Websense reporting interfaces, especially where administrative or reporting pages are reachable by untrusted users. Current exposure cannot be inferred from the provided sources. Treat this as a legacy security-product exposure issue. It is not marked as actively exploited, but affected reporting consoles may be administrator-facing, so outdated deployments should be found and remediated promptly. Mitigation focus: Upgrade TRITON AP-WEB to version 8.0.0 or later where applicable.; Apply Web Security 7.8.3 Hotfix 02 if remaining on 7.8.3.; Apply Web Security 7.8.4 Hotfix 01 if remaining on 7.8.4..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.