CVE Intelligence

TeleMessage Service vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting TeleMessage Service: 2 record(s), with affected versions and fixes.

CVE-2025-48928 Medium · 4.0 KEV High · 45 CWE-552 May 28, 2025
TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability
The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025.
CVE-2025-48927 Medium · 5.3 KEV High · 55 CWE-1188 May 28, 2025
TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.