Cross site scripting

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling...

Cross site scripting

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling Syst...

Information disclosure

: Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5...

Cross site scripting

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions...

Cross site scripting

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

Cross site scripting

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

CVE-2019-9542

Summary of CVE-2019-9542 : Telos Automated Message Handling System (AMHS) contains a cross-site scripting (XSS) vulnerability in the itemlookup.asp endpoint. The issue arises from improper neutralization of input during web page generation, allowing remote attackers to inject arbitrary script int...

CVE-2019-9541

Telos Automated Message Handling System (AMHS) contains an information disclosure vulnerability in itemlookup.asp. AMHS versions prior to 4.1.5.5 are affected, allowing a remote attacker to inject arbitrary script into an AMHS session (XSS/information exposure). The CERT/NVD/Red Hat entries corro...

CVE-2019-9542 Telos Automated Message Handling System reflected XSS in itemlookup.asp

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

CVE-2019-9541 Telos Automated Message Handling System information disclosure in itemlookup.asp

: Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5...

CVE-2019-9539 Telos Automated Message Handling System reflected XSS in ModalWindowPopup.asp

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling Syst...

CVE-2019-9539

Telos Automated Message Handling System (AMHS) contains a cross-site scripting vulnerability in ModalWindowPopup.asp. Multiple connected sources confirm that AMHS versions prior to 4.1.5.5 are affected by an improper neutralization of user input during web page generation, enabling an attacker to...

CVE-2019-9540 Telos Automated Message Handling System reflected XSS in prefs.asp

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions...

CVE-2019-9540

CVE-2019-9540 affects Telos Automated Message Handling System (AMHS) with a cross-site scripting vulnerability in prefs.asp. The issue arises from improper input neutralization during web page generation, allowing a remote attacker to inject arbitrary script into an AMHS session. Affected version...

CVE-2019-9537

CVE-2019-9537 concerns Telos Automated Message Handling System (AMHS). The vulnerability is an improper neutralization of input in uploaditem.asp, enabling a remote attacker to inject arbitrary script into an AMHS session (cross-site scripting). Affected versions are AMHS before 4.1.5.5. Several ...

CVE-2019-9538

CVE-2019-9538 affects Telos Automated Message Handling System (AMHS). A Cross-Site Scripting vulnerability exists in the LDAP cbURL parameter, allowing an attacker to inject arbitrary script into an AMHS session. Affected versions are AMHS prior to 4.1.5.5. CVSS data in the records shows CVSS v3....

CVE-2019-9537 Telos Automated Message Handling System reflected XSS in uploaditem.asp

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

CVE-2019-9538 Telos Automated Message Handling System reflected XSS in LDAP cbURL parameter

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling...

Telos AMHS Multiple Cross Site Scripting and Information Disclosure Vulnerabilities

Description Telos AMHS is prone to multiple cross-site scripting vulnerabilities and an information-disclosure vulnerability. An attacker may leverage these issues to obtain sensitive information or execute arbitrary script code in the browser of an unsuspecting user in the context of the affecte...

Telos Automated Message Handling System contains multiple vulnerabilities

Overview Telos Automated Message Handling System AMHS contains multiple XSS vulnerabilities and a database information disclosure vulnerability. Description Telos AMHS is a web-based messaging system that supports DoD and Intelligence Community IC security marking requirements. AMHS versions prio...