CVE-2019-9541

Telos Automated Message Handling System information disclosure in itemlookup.asp

EPSS 0.8%CWE-200

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

03 Jan 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

: Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.

Affected products

Telos · Automated Message Handling System

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.kb.cert.org/vuls/id/873161/