service

5 results · Clear filters · Feed

• Medium 5.3
  CVE-2025-48927 Exploited EPSS 12%

  The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /hea…

  TeleMessage service
  May 28, 2025

  KEV Jul 1, 2025
• Medium 4.3
  CVE-2025-48925

  The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and the…

  TeleMessage service
  May 28, 2025
• Medium 4.0
  CVE-2025-48929

  The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a token…

  TeleMessage service
  May 28, 2025
• Medium 4.3
  CVE-2025-48926

  The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail addresses,…

  TeleMessage service
  May 28, 2025
• Medium 4.0
  CVE-2025-48928 Exploited

  The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalen…

  TeleMessage service
  May 28, 2025

  KEV Jul 1, 2025