CVE-2019-9542

Publication date

2020-01-03 21:55:18

Family

certcc

State

PUBLISHED

Description

: Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.