Vulnerability Details CVE-2009-5131
The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which allows remote attackers to bypass intended access restrictions and send e-mail messages via an SMTP session.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.7%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2009-5131
-
cpe:2.3:a:websense:websense_email_security:6.1
-
cpe:2.3:a:websense:websense_email_security:7.0