← CVE Intelligence

CVE-2019-9538

Telos Automated Message Handling System reflected XSS in LDAP cbURL parameter PUBLISHED

Description (CNA)

: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.

Affected (CNA)

Vendor / productVersions
Telos / Automated Message Handling Systemaffected unspecified before 4.1.5.5

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.