CVE-2019-9538

CVE-2019-9538 affects Telos Automated Message Handling System (AMHS). A Cross-Site Scripting vulnerability exists in the LDAP cbURL parameter, allowing an attacker to inject arbitrary script into an AMHS session. Affected versions are AMHS prior to 4.1.5.5. CVSS data in the records shows CVSS v3....

CVE-2019-9537

CVE-2019-9537 concerns Telos Automated Message Handling System (AMHS). The vulnerability is an improper neutralization of input in uploaditem.asp, enabling a remote attacker to inject arbitrary script into an AMHS session (cross-site scripting). Affected versions are AMHS before 4.1.5.5. Several ...

CVE-2019-9540: Improper Neutralization of Input During Web Page Generation

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions...

PT-2020-11364

Name of the Vulnerable Software and Affected Versions Telos Automated Message Handling System versions prior to 4.1.5.5 Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows a remote attacker to inject...

Telos Automated Message Handling System contains multiple vulnerabilities

Overview Telos Automated Message Handling System AMHS contains multiple XSS vulnerabilities and a database information disclosure vulnerability. Description Telos AMHS is a web-based messaging system that supports DoD and Intelligence Community IC security marking requirements. AMHS versions prio...

Telos AMHS Multiple Cross Site Scripting and Information Disclosure Vulnerabilities

Description Telos AMHS is prone to multiple cross-site scripting vulnerabilities and an information-disclosure vulnerability. An attacker may leverage these issues to obtain sensitive information or execute arbitrary script code in the browser of an unsuspecting user in the context of the affecte...