Approved changes feed: RSS · Atom
cpe:2.3:a:telemessage:service:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Telemessage (8b590f8c-42ea-55b2-aea5-8df652c9db17) |
|---|---|
| Product | Service (751b95e7-83a4-5d82-aac3-4bbf31a52c27) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-48931 |
vulnerable | 2026-06-08 07:29:12.263853 |
Details available
LOW (3.2)
The TeleMessage service through 2025-05-05 relies on MD5 for password hashing, which opens up various attack possibilities (including rainbow tables) with low computational effort.
Published: 2025-05-28T00:00:00.000Z
Updated: 2025-05-29T18:57:13.305Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48930 |
vulnerable | 2026-06-08 07:29:12.263471 |
Details available
LOW (2.8)
The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues.
Published: 2025-05-28T00:00:00.000Z
Updated: 2025-07-01T19:46:40.527Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48929 |
vulnerable | 2026-06-08 07:29:12.262973 |
Details available
MEDIUM (4)
The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a token with a short expiration time) that can be reused at a later date if discovered by an adversary.
Published: 2025-05-28T00:00:00.000Z
Updated: 2025-07-01T19:47:22.186Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48928 |
vulnerable | 2026-06-08 07:29:12.262538 |
Details available
MEDIUM (4)
The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025.
Published: 2025-05-28T00:00:00.000Z
Updated: 2026-02-26T18:27:52.827Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48927 |
vulnerable | 2026-06-08 07:29:12.260162 |
Details available
MEDIUM (5.3)
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.
Published: 2025-05-28T00:00:00.000Z
Updated: 2026-02-26T18:27:53.525Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48926 |
vulnerable | 2026-06-08 07:29:12.259719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48925 |
vulnerable | 2026-06-08 07:29:12.258099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.