CVE-2019-9541— Telos Automated Message Handling System information disclosure in itemlookup.asp
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-9541
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Telos Automated Message Handling System information disclosure in itemlookup.asp
Source: NVD (National Vulnerability Database)
Vulnerability Description
: Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
信息暴露
Source: NVD (National Vulnerability Database)
Vulnerability Title
Telos Automated Message Handling System 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Telos Automated Message Handling System（AMHS）是美国Telos公司的一套自动化消息管理系统。 Telos AMHS 4.1.5.5之前版本中的itemlookup.asp文件存在跨站脚本漏洞。远程攻击者可利用该漏洞在AMHS会话中注入任意脚本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Telos | Automated Message Handling System | unspecified ~ 4.1.5.5 | - |
II. Public POCs for CVE-2019-9541
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-9541
Please Login to view more intelligence information
Same Patch Batch · Telos · 2020-01-03 · 6 CVEs total
| CVE-2019-9537 | Telos Automated Message Handling System reflected XSS in uploaditem.asp | |
| CVE-2019-9538 | Telos Automated Message Handling System reflected XSS in LDAP cbURL parameter | |
| CVE-2019-9539 | Telos Automated Message Handling System reflected XSS in ModalWindowPopup.asp | |
| CVE-2019-9540 | Telos Automated Message Handling System reflected XSS in prefs.asp | |
| CVE-2019-9542 | Telos Automated Message Handling System reflected XSS in itemlookup.asp |
IV. Related Vulnerabilities
Same product: Automated Message Handling System
- CVE-2019-9542
Telos Automated Message Handling System reflected XSS in ite - CVE-2019-9539
Telos Automated Message Handling System reflected XSS in Mod - CVE-2019-9540
Telos Automated Message Handling System reflected XSS in pre - CVE-2019-9537
Telos Automated Message Handling System reflected XSS in upl - CVE-2019-9538
Telos Automated Message Handling System reflected XSS in LDA
Same vendor: Telos
- CVE-2019-9542
Telos Automated Message Handling System reflected XSS in ite - CVE-2019-9539
Telos Automated Message Handling System reflected XSS in Mod - CVE-2019-9540
Telos Automated Message Handling System reflected XSS in pre - CVE-2019-9537
Telos Automated Message Handling System reflected XSS in upl - CVE-2019-9538
Telos Automated Message Handling System reflected XSS in LDA
Same weakness: CWE-200
- CVE-2026-42333
quarkus-openapi-generator has overly broad path-parameter ma - CVE-2026-8198
Activity Logs, User Activity Tracking, Multisite Activity Lo - CVE-2026-42456
AnythingLLM: Cross-User TTS Audio Disclosure via Chat ID (ID - CVE-2026-41520
Cillium exposes sensitive information included in the cilium - CVE-2026-25199
Apache CloudStack: Proxmox Extension Allows Unauthorized Cro
V. Comments for CVE-2019-9541
No comments yet