Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-9539

Telos Automated Message Handling System reflected XSS in ModalWindowPopup.asp

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
certcc

Description

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Telos Automated Message Handling System

  • unspecified to < 4.1.5.5affected

References