Skip to content
OpenAdvisories

Vendor

TeleMessage

9 known vulnerabilities.

Products

service 7 archiving backend 2
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-48927 Exploited EPSS 12%

    The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /hea…

    TeleMessage service
    KEV Jul 1, 2025
  • Medium 4.3
    CVE-2025-48925

    The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and the…

    TeleMessage service
  • Medium 4.0
    CVE-2025-48929

    The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a token…

    TeleMessage service
  • Medium 4.3
    CVE-2025-48926

    The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail addresses,…

    TeleMessage service
  • Medium 4.0
    CVE-2025-48928 Exploited

    The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalen…

    TeleMessage service
    KEV Jul 1, 2025
  • Medium 4.8
    CVE-2025-47730

    The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the TM…

    TeleMessage archiving backend