Vulnerabilidades de Smarsh
CVEs publicadas que afetam produtos de Smarsh: 2 registro(s), com severidade, exploração e correções.
CVE-2025-48928
Média · 4.0
KEV Alta · 45 CWE-552 28/05/2025
TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability
The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025.
CVE-2025-48927
Média · 5.3
KEV Alta · 55 CWE-1188 28/05/2025
TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.