Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-9538

Telos Automated Message Handling System reflected XSS in LDAP cbURL parameter

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
certcc

Description

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Telos Automated Message Handling System

  • unspecified to < 4.1.5.5affected

References