What’s Vulnerable › Vulnerabilities

CVE-2009-5122

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-08-23 · updated 2026-06-16
• Weakness: CWE-200

Description

The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive information from the JBoss status page via an unspecified query.

Affected products

• Websense Email Security: through 7.1; 6.1, 6.1-sp1, 7.0

References

• http://www.websense.com/content/support/library/email/v72wes/release_notes/WES72_ReleaseNotes.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78449
• http://www.websense.com/content/support/library/email/v72wes/release_notes/WES72_ReleaseNotes.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78449

Get alerted when CVE-2009-5122 or the next vulnerability affects your stack