CVE-2019-9541

Telos Automated Message Handling System (AMHS) contains an information disclosure vulnerability in itemlookup.asp. AMHS versions prior to 4.1.5.5 are affected, allowing a remote attacker to inject arbitrary script into an AMHS session (XSS/information exposure). The CERT/NVD/Red Hat entries corro...

CVE-2019-9537

CVE-2019-9537 concerns Telos Automated Message Handling System (AMHS). The vulnerability is an improper neutralization of input in uploaditem.asp, enabling a remote attacker to inject arbitrary script into an AMHS session (cross-site scripting). Affected versions are AMHS before 4.1.5.5. Several ...

CVE-2019-9538

CVE-2019-9538 affects Telos Automated Message Handling System (AMHS). A Cross-Site Scripting vulnerability exists in the LDAP cbURL parameter, allowing an attacker to inject arbitrary script into an AMHS session. Affected versions are AMHS prior to 4.1.5.5. CVSS data in the records shows CVSS v3....

CVE-2019-9542

Summary of CVE-2019-9542 : Telos Automated Message Handling System (AMHS) contains a cross-site scripting (XSS) vulnerability in the itemlookup.asp endpoint. The issue arises from improper neutralization of input during web page generation, allowing remote attackers to inject arbitrary script int...

CVE-2019-9539

Telos Automated Message Handling System (AMHS) contains a cross-site scripting vulnerability in ModalWindowPopup.asp. Multiple connected sources confirm that AMHS versions prior to 4.1.5.5 are affected by an improper neutralization of user input during web page generation, enabling an attacker to...

CVE-2019-9540

CVE-2019-9540 affects Telos Automated Message Handling System (AMHS) with a cross-site scripting vulnerability in prefs.asp. The issue arises from improper input neutralization during web page generation, allowing a remote attacker to inject arbitrary script into an AMHS session. Affected version...