Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2025-48928

The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025.

  • Published: May 28, 2025
  • Updated: Nov 6, 2025
  • CVE: CVE-2025-48928
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4
  • AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N