TeleMessage service vulnerabilities
7 published CVEs name TeleMessage service among the affected products; CISA lists 2 of them as exploited in the wild.
- 7Published CVEs7 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 2Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2025-48927
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in…
TeleMessage · service
ExploitedMedium5.3 - CVE-2025-48928
The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password…
TeleMessage · service
ExploitedMedium4.0