Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority LOW 29

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00841 Published 2020-01-03 Fixed in 4.1.5.5 CWE-79
Priority LOW 29

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMH…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00841 Published 2020-01-03 Fixed in 4.1.5.5 CWE-79
Priority LOW 29

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00841 Published 2020-01-03 Fixed in 4.1.5.5 CWE-79
Priority LOW 29

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary scr…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00841 Published 2020-01-03 Fixed in 4.1.5.5 CWE-79
Priority LOW 29

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00841 Published 2020-01-03 Fixed in 4.1.5.5 CWE-79