Read the docs

Telos

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Telos records in CISA KEV

No Telos vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Automated Message Handling System 6 records LOW

Records

6 records in Automated Message Handling System · all components

TI-2019-06967 CVE-2019-9542 · GHSA-pjrm-r843-cm53

Telos Automated Message Handling System reflected XSS in itemlookup.asp

Priority LOW 29

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00841 Published 2020-01-03 Fixed in 4.1.5.5 CWE-79
TI-2019-06965 CVE-2019-9540 · GHSA-qqr6-25h8-4f8f

Telos Automated Message Handling System reflected XSS in prefs.asp

Priority LOW 29

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMH…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00841 Published 2020-01-03 Fixed in 4.1.5.5 CWE-79
TI-2019-06964 CVE-2019-9539 · GHSA-vwww-h3wq-9w3m

Telos Automated Message Handling System reflected XSS in ModalWindowPopup.asp

Priority LOW 29

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00841 Published 2020-01-03 Fixed in 4.1.5.5 CWE-79
TI-2019-06963 CVE-2019-9538 · GHSA-gjjv-943h-wj4x

Telos Automated Message Handling System reflected XSS in LDAP cbURL parameter

Priority LOW 29

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary scr…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00841 Published 2020-01-03 Fixed in 4.1.5.5 CWE-79
TI-2019-06962 CVE-2019-9537 · GHSA-4g2c-8mg7-7g89

Telos Automated Message Handling System reflected XSS in uploaditem.asp

Priority LOW 29

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00841 Published 2020-01-03 Fixed in 4.1.5.5 CWE-79
Open these records in search →