CVE-2015-2747: Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Preview in Webs

CVE-2015-2747 is a cross-site scripting (XSS) vulnerability (a type of attack where an attacker injects malicious code into a webpage that runs in users' browsers) in Websense Triton 7.8.3 and V-Series 7.7 appliances' data loss prevention (DLP, a security tool that prevents sensitive data from leaving an organization) feature. Remote attackers can exploit this by sending crafted emails or HTTP requests to inject arbitrary web scripts or HTML code.