CVE-2019-9540CWE-79

CVE-2019-9540: vulnerability in Telos Automated Message Handling System

Telos Automated Message Handling System reflected XSS in prefs.asp

Published · Updated

Follow this CVE+ Monitor Automated Message Handling System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.
Affected products
Telos · Automated Message Handling System
Related CVEs — Telos Automated Message Handling System

In the same product, most dangerous first.

CVE-2019-9542—Telos Automated Message Handling System reflected XSS in itemlookup.aspEPSS 0.8%CVE-2019-9539—Telos Automated Message Handling System reflected XSS in ModalWindowPopup.aspEPSS 0.8%CVE-2019-9538—Telos Automated Message Handling System reflected XSS in LDAP cbURL parameterEPSS 0.8%CVE-2019-9537—Telos Automated Message Handling System reflected XSS in uploaditem.aspEPSS 0.8%CVE-2019-9541—Telos Automated Message Handling System information disclosure in itemlookup.aspEPSS 0.8%