Read the docs

AMTELCO

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

AMTELCO records in CISA KEV

No AMTELCO vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Misecuremessages 2 records LOW

Records

2 records

TI-2014-01863 CVE-2014-2347 · GHSA-phxp-3wwr-wjfr

AMTELCO miSecure Information Exposure

Priority LOW 35

Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request.

CVSS 2.0HIGH 7.0 Network Low privileges Interaction — EPSS 0.02321 Published 2014-05-06 No fix listed CWE-200
TI-2014-00339 CVE-2014-0357 · GHSA-9pww-fvv6-chh3

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users…

Priority LOW 26

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Andr…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01833 Published 2014-04-15 No fix listed CWE-287
Open these records in search →